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About This Book 


This user’s manual provides the architectural overview, programming model, and detailed information 
about the registers, the instruction set, and operations of the IBM PowerPC 405GP (PPC405GP) 
32-bit RISC embedded processor. 


The PPC405GP RISC embedded processor features: 


¢ PowerPC Architecture™ 

e Single-cycle execution for most instructions 

e {nstruction cache unit and data cache unit 

¢ Support for Little Endian operation 

e Interrupt interface for one critical and one non-critical interrupt signal 
¢ JTAG interface 

e Extensive development tool support 


Who Should Use This Book 


This book is for system hardware and software developers, and for application developers who need 
to understand the PPC405GP. The audience should understand embedded processor design, 
embedded system design, operating systems, RISC processing, and design for testability. 


How to Use This Book 


This book describes the PPC405GP device architecture, programming model, external interfaces, 
internal registers, and instruction set. This book contains the following chapters, arranged in parts: 


Part! Introducing the PPC405GP Embedded Processor 
Chapter 1 Overview 
Chapter2 On-Chip Buses 
Part Il The PPC405GP RISC Processor 
Chapter 3 Programming Model 
Chapter4 § Cache Operations 
Chapter5 On-Chip Memory 
Chapter 6 Memory Management 
Part Ill PPC405GP System Operations 
Chapter 7 Clocking 
Chapter 8 Reset and Initialization 
‘ Chapter 9 Pin Strapping and Sharing 
Chapter 10 ‘Interrupt Controller Operations 
Chapter11 Timer Facilities 
Chapter 12 Debugging 
Chapter 13 Clock and Power Management 
Chapter 14 Decompression Controller Operation 
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Part |V PPC405GP External Interfaces 
Chapter15 SDRAMController _ 
Chapter 16 External Bus Controller 
Chapter 17 PCI Interface 
Chapter 18 Direct Memory Access Controller 
Chapter 19 Ethernet Media Access Controller 
Chapter 20 Memory Access Layer 
Chapter 21 Serial Port Operations 
Chapter 22 _‘IIC Bus Interface 
Chapter 23 GPIO Operations 
Part V Reference 
Chapter 24 Instruction Set 
Chapter 25 Register Summary 
Chapter 26 Signal Summary 


This book contains the following appendixes: 


Appendix A Instruction Summary 
Appendix B Instructions by Category 
Appendix C Code Optimization and Instruction Timings 


To help readers find material in these chapters, the book contains: 


Contents, on page v. 
Figures, on page xxix. 
Tables, on page xii. 
Index, on page X-1. 


Conventions 


The following is a list of notational conventions frequently used in this manual. 


ActiveLow An overbar indicates an active-low signal. 
n A decimal number 

Oxn A hexadecimal number 

Obn A binary number 

= Assignment 

A AND logical operator 

a NOT logical operator 

Vv OR logical operator 

® Exclusive-OR (XOR) logical operator 

+ Twos complement addition 


- Twos complement subtraction, unary minus 


x Multiplication 
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% 

I 
=F 
<,> 
usu 
<j > 


if...then...else... 


do 


leave 

FLD 

FLD, 

FLD pb 
FLDpb, ... 
REG, 
REG, 
REGpp,... 
REG[FLD] 


REG[FLD, FLD _ 


REG[FLD:FLD] 
GPR(r) 
(GPR(r)) 
DCR(DCRN) 


SPR(SPRN) 
TBR(TBRN) 


GPRs 
(Rx) 
(RAIO) 
CRetp 
Co:3 

"b 


Division yielding a quotient 

Remainder of an integer division; (83 % 32) = 1. 
Concatenation 

Equal, not equal relations 

Signed comparison relations 

Unsigned comparison relations 


Conditional execution; if conditionthen a else b, where a and b represent 
one or more pseudocode statements. Indenting indicates the ranges of a 
and b. If bis null, the else does not appear. 


Do loop. “to” and “by” clauses specify incrementing an iteration variable; 
“while” and “until” clauses specify terminating conditions. Indenting 
indicates the scope of a loop. 


Leave innermost do loop or do loop specified in a leave statement. 
An instruction or register field ) 
A bit in a named instruction or register field 

A range of bits in a named instruction or register field 

A list of bits, by number or name, in a named instruction or register field 
A bit in a named register 

A range of bits in a named register 

A list of bits, by number or name, in a named register 

A field in a named register 

Alist of fields in a named register 

Arange of fields in a named register 

General Purpose Register (GPR) r, where 0 <r < 31. 

The contents of GPR r, where O<r< 31. 


A Device Control Register (DCR) specified by the DCRF field in an 
mfdcr or mtder instruction 


An SPR specified by the SPRF field in an mfspr or mtspr instruction 


A Time Base Register (TBR) specified by the TBRF field in an mftb 
instruction 


RA, RB, ... 

The contents of a GPR, where xis A, B, S, or T 

The contents of the register RA or 0, if the RA field is 0. 

The field in the condition register pointed to by a field of an instruction. 
A 4-bit object used to store condition results in compare instructions. 


The bit or bit value b is replicated n times. 
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XX 
CEIL(x) 
EXTS(x) 
PC 
RESERVE 


CIA 


NIA 


MS(adadr, n) 
EA 
EA, 


EAp:b 
ROTL((RS),n) 


MASK(MB,ME) 


instruction(EA) 


Bit positions which are don’t-cares. 

Least integer 2 x. 

The result of extending x on the left with sign bits. 
Program counter. 


Reserve bit; indicates whether a process has reserved a block of 
storage. 


Current instruction address; the 32-bit address of the instruction being 
described by a sequence of pseudocode. This address is used to set the 
next instruction address (NIA). Does not correspond to any architected 
register. 


Next instruction address; the 32-bit address of the next instruction to be 
executed. In pseudocode, a successful branch is indicated by assigning 
a value to NIA. For instructions that do not branch, the NIA is CIA +4. 


The number of bytes represented by n at the location in main storage 
represented by adar. 


Effective address; the 32-bit address, derived by applying indexing or 
indirect addressing rules to the specified operand, that specifies a 
location in main storage. 


A bit in an effective address. 
A range of bits in an effective address. 


Rotate left; the contents of RS are shifted left the number of bits 
specified by n. 

Mask having 1s in positions MB through ME (wrapping if MB > ME) and 
Os elsewhere. | 


An instruction operating on a data or instruction cache block associated 
with an EA. 
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Part I. Introducing the PPC405GP Embedded Processor 


Preliminary 
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Chapter 1. Overview 


The IBM PowerPC 405GP 32-bit reduced instruction set computer (RISC) embedded processor, 
referred to as the PPC405GP, is a system-on-a-chip (SOC) that integrates a PowerPC embedded 
processor core with a rich set of on-chip peripherals: 


SDRAM controller 

External bus controller (EBC) 

PCI bus interface 

Direct memory access (DMA) with scatter/gather support 
Ethernet and media access layer (MAL) interfaces 

Two serial ports 

Inter-integrated circuit (IIC) interface 


General-purpose input/output (GPIO) 


In addition, the PPC405GP supports CodePack™, a code compression scheme that can significantly 
reduce application code memory requirements, and a variety of debug tools. 


This chapter describes: 


PPC405GP features 
The PowerPC Architecture™ 


The PPC405GP implementation of the IBM PowerPC Embedded Environment, an extension of the 
PowerPC Architecture for embedded applications 


PPC405GP organization, including a block diagram and descriptions of the functional units 
PPC405GP registers 
PPC405GP addressing modes 
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Figure 1-1 illustrates the logical organization of the PPC405GP: 


PPC405GP UART 
Processor Core 


PLB (64 bits) 


Code : 
Decompression PCI Bridge 
External External 
ee Bus Bus Master 
Controller Controller 


v 
Figure 1-1. PPC405GP Block Diagram 


1.1 PPC405GP Features 


The PPC405GP provides high performance and low power consumption. The PPC405GP RISC CPU 
executes at sustained speeds approaching one cycle per instruction. On-chip instruction and data 
caches reduce chip count and design complexity in systems and improve system throughput. 


1.1.1. Bus and Peripheral Features 


The PPC405GP multilevel bus architecture and peripherals feature: 


e Processor local bus (PLB) 
¢ On-chip peripheral bus (OPB) 
‘ PC-100 synchronous DRAM (SDRAM) controller 


— 32-bit interface for non-ECC applications 
— 40-bit interface (32 data bits and 8 check bits) for ECC applications 
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External bus controller (EBC) 

— Flash ROM/Boot ROM interface 

— Direct support for 8-, 16-, or 32-bit SRAM or external peripherals 
— One external master supported 

PCI bus, Revision 2.2 compliant (32 bit, up to 66 MHz) 


— PCI bus interface can be configured to operate synchronously or asynchronously to the PLB 
— Internal PCI bus arbiter that can be disabled for use with an external arbiter 


DMA support for OPB and external peripherals 

Ethernet 10/100 Mbps (full-duplex) controller with media access layer (MAL) support 
Interrupt controller supporting programmable interrupt handling from a variety of sources 
Two 8-bit serial ports (16550 compatible UARTs) 

Inter-integrated circuit (IIC) controller 


General purpose I/O (GPIO) controller 


1.1.2 PowerPC Processor Core Features 
The PowerPC RISC fixed-point CPU features: 


PowerPC User Instruction Set Architecture (UISA) and extensions for embedded applications 
Thirty-two 32-bit general purpose registers (GPRs) 

Static branch prediction 

Five-stage pipeline with single-cycle execution of most instructions, including loads/stores 
Unaligned load/store support to cache arrays, main memory, and on-chip memory (OCM) 
Hardware multiply/divide for faster integer arithmetic (4-cycle multiply, 35-cycle divide) 
Multiply-accumulate instructions 

Enhanced string and multiple-word handling 

True little endian operation 

Programmable Interval Timer (PIT), Fixed Interval Timer (FIT), and watchdog timer 
Forward and reverse trace from a trigger event 

Storage control 

— Separate, configurable, two-way set-associative instruction and data cache units 

— Eight words (32 bytes) per cache line 

— 16KB instruction and 8KB data cache arrays 


— Instruction cache unit (ICU) non-blocking during line fills, data cache unit (DCU) non-blocking 
during line fills and flushes 


— Read and write line buffers 

— Instruction fetch hits are supplied from line buffer 

~ Data load/store hits are supplied to line buffer 

— Programmable ICU prefetching of next sequential line into line buffer 
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Programmable ICU prefetching of non-cacheable instructions, full line (eight words) or half line 
(four words) 


Write-back or write-through DCU write strategies 


Programmable allocation on loads and stores 


Operand forwarding during cache line fills 


Memory Management 


Translation of the 4GB logical address space into physical addresses 
Independent enabling of instruction and data translation/protection 
Page level access control using the translation mechanism 

Software control of page replacement strategy 

Additional control over protection using zones 


WIUOGE (write-through, cacheability, user-defined 0, guarded, endian) storage attribute control 
for each virtual memory region 


WIUOGE storage attribute control for thirty-two real 128MB regions 
PowerPC timer facilities 


— 64-bit time base 
— PIT, FIT, and watchdog timers 
— Synchronous external time base clock input 


Debug Support 


Enhanced debug support with logical operators 


Four instruction address compares (IACs) 


Two data address compares (DACs) 


Two data value compares (DVCs) 
JTAG instruction to write to ICU 


Forward or backward instruction tracing 


Minimized interrupt latency 


Advanced power management support 


1.2 PowerPC Architecture 


The PowerPC Architecture comprises three levels of standards: 


PowerPC User Instruction Set Architecture (UISA), including the base user-level instruction set, 
user-level registers, programming model, data types, and addressing modes. This is referred to as 
Book | of the PowerPC Architecture. 


PowerPC Virtual Environment Architecture, describing the memory model, cache model, cache- 
control instructions, address aliasing, and related issues. While accessible from the user level, 
these features are intended to be accessed from within library routines provided by the system 
software. This is referred to as Book Il of the PowerPC Architecture. 
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¢ PowerPC Operating Environment Architecture, including the memory management model, 
supervisor-level registers, and the exception model. These features are not accessible from the 
user level. This is referred to as Book III of the PowerPC Architecture. 


Book | and Book II define the instruction set and facilities available to the application programmer. 
Book Ill defines features, such as system-level instructions, that are not directly accessible by user 
applications. The PowerPC Architecture is described in The PowerPC Architecture: A Specification 
for a New Family of RISC Processors. 


The PowerPC Architecture provides compatibility of PowerPC Book | application code across all 
PowerPC implementations to help maximize the portability of applications developed for PowerPC 
processors. This is accomplished through compliance with the first level of the architectural definition, 
the PowerPC UISA, which is common to all PowerPC implementations: 


1.3. The PPC405GP as a PowerPC Implementation 


The PPC405GP implements the PowerPC UISA, user-level registers, programming model, data 
types, addressing modes, and 32-bit fixed-point operations. The PPC405GP fully complies with the 
PowerPC UISA. The UISA 64-bit and floating point operations are not implemented. The floating point 
operations, which cause exceptions, can then be emulated by software. 


Most of the features of the PPC405GP processor core are compatible with the PowerPC Virtual 
Environment and Operating Environment Architectures, as implemented in PowerPC processors such 
as the 6xx/7xx family. The PPC405GP processor core also provides a number of optimizations and 
extensions to these layers of the PowerPC Architecture. The full architecture of the PPC405GP is 
defined by the PowerPC Embedded Environment and the PowerPC User Instruction Set Architecture. 


The primary extensions of the PowerPC Architecture defined in the Embedded Environment are: 


¢ Asimplified memory management mechanism with enhancements for embedded applications 

e An enhanced, dual-level interrupt structure , 

e An architected DCR address space for integrated peripheral control 

e The addition of several instructions to support these modified and extended resources 

Finally, some of the specific implementation features of the PPC405GP are beyond the scope of the 


PowerPC Architecture. These features are included to enhance performance, integrate functionality, 
and reduce system complexity in embedded control applications. 


1.4 RISC Processor Core Organization 


The processor core consists of a 5-stage pipeline, separate instruction and data cache units, virtual 
memory management unit (MMU), three timers, debug, and interfaces to other functions. 


1.4.1. Instruction and Data Cache Controllers 


The PPC405GP processor core uses a 16KB instruction cache unit (ICU) and an 8KB data cache unit 
(DCU) to enable concurrent accesses and minimize pipeline stalls. Both cache units are two-way set- 
associative and use a 32-byte line size. The instruction set provides a rich assortment of cache 
control instructions, including instructions to read tag information and data arrays. See Chapter 4, 
“Cache Operations,” for detailed information about the ICU and DCU. 
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1.4.1.1. Instruction Cache Unit 


The ICU provides one or two instructions per cycle to the execution unit (EXU) over a 64-bit bus. A 
line buffer (built into the output of the array for manufacturing test) enables the ICU to be accessed 
only once for every four instructions, to reduce power consumption by the array. 


The ICU can forward any or all of the words of a line fill to the EXU to minimize pipeline stalls caused 
by cache misses. The ICU aborts speculative fetches abandoned by the EXU, eliminating 
unnecessary line fills and enabling the ICU to handle the next EXU fetch. Aborting abandoned 
requests also eliminates unnecessary PLB activity to increase PLB availability for other on-chip cores, 
such as the DMA and Ethernet controllers. 


1.4.1.2 Data Cache Unit 


The DCU transfers 1, 2, 3, 4, or 8 bytes per cycle, depending on the number of byte enables 
presented by the CPU. The DCU contains a single-element command and store data queue to reduce 
pipeline stalls; this queue enables the DCU to independently process load/store and cache control 
instructions. Dynamic PLB request prioritization reduces pipeline stalls even further. When the DCU is 
busy with a low-priority request while a subsequent storage operation requested by the CPU is 
stalled, the DCU automatically increases the priority of the current request to the PLB. 


The DCU uses a two-line flush queue to minimize pipeline stalls caused by cache misses. Line 
flushes are postponed until after a line fill is completed. Registers comprise the first position of the 
flush queue; the line buffer built into the output of the array for manufacturing test serves as the 
second position of the flush queue. Pipeline stalls are further reduced by forwarding the requested 
word to the CPU during the line fill. Single-queued flushes are non-blocking. When a flush operation is 
pending, the DCU can continue to access the array to determine subsequent load or store hits. Under 
these conditions, load hits can occur concurrently with store hits to write-back memory without stalling 
the pipeline. Requests abandoned by the CPU can also be aborted by the cache controller. 


Additional DCU features enable the programmer to tailor performance for a given application. The 
DCU can function in write-back or write-through mode, as controlled by the Data Cache Write-through 
Register (DCWR) or the translation look-aside buffer-(TLB). DCU performance can be tuned to 
balance performance and memory coherency. Store-without-allocate, controlled by the SWOA field of 
the Core Configuration Register 0 (CCRO), can inhibit line fills caused by store misses to further ° 
reduce potential pipeline stalls and unwanted external bus traffic. Similarly, load-without-allocate, 
controlled by CCRO[LWOA], can inhibit line fills caused by load misses. 


1.4.2 Memory Management Unit 
The 4GB address space of the PPC405GP is presented as a flat address space. 


The MMU provides address translation, protection functions, and storage attribute control for 
embedded applications. The MMU supports demand paged virtual memory and other management 
schemes that require precise control of logical to physical address mapping and flexible memory 
protection. Working with appropriate system level software, the MMU provides the following functions: 
¢ Translation of the 4GB logical address space into physical addresses 

¢ Independent enabling of instruction and data translation/protection 

e Page level access control using the translation mechanism 

¢ Software control of page replacement strategy 

¢ Additional control over protection using zones 
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¢ Storage attributes for cache policy and speculative memory access control 


The MMU can be disabled under software control. If the MMU is not used, the PPC405GP provides 
other storage control mechanisms. 


The translation lookaside buffer (TLB) is the hardware resource that controls translation and 
protection. It consists of 64 entries, each specifying a page to be translated. The TLB is fully 
associative; a page entry can be placed anywhere in the TLB. The translation function of the MMU 
occurs pre-cache for data accesses. Cache tags and indexing use physical addresses for data 
accesses; instruction fetches are virtually indexed and physically tagged. 


Software manages the establishment and replacement of TLB entries. This gives system software 
significant flexibility in implementing a custom page replacement strategy. For example, to reduce TLB 
thrashing or translation delays, software can reserve several TLB entries for globally accessible static 
mappings. The instruction set provides several instructions to manage TLB entries. These instructions 
are privileged and require the software to be executing in supervisor state. Additional TLB instructions 
are provided to move TLB entry fields to and from GPRs. 


The MMU divides logical storage into pages. Eight page sizes (1KB, 4KB, 16KB, 64KB, 256KB, 1MB, 
4MB, 16MB) are simultaneously supported, so that, at any given time, the TLB can contain entries for 
any combination of page sizes. For a logical to physical translation to occur, a valid entry for the page 
containing the logical address must be in the TLB. Addresses for which no TLB entry exists cause 
TLB-Miss exceptions. 


To improve performance, 4 instruction-side and 8 data-side TLB entries are kept in shadow arrays. 
The shadow arrays prevent TLB contention. Hardware manages the replacement and invalidation of 
shadow-TLB entries; no system software action is required. The shadow arrays can be thought of as 
level 1 TLBs, with the main TLB serving as a level 2 TLB. . 


When address translation is enabled, the translation mechanism provides a basic level of protection. 
Physical addresses not mapped by a page entry are inaccessible when translation is enabled. Read 
access is implied by the existence of the valid entry in the TLB. The EX and WR bits in the TLB entry 
further define levels of access for the page, by permitting execute and write access, respectively. 


The Zone Protection Register (ZPR) enables the system software to override the TLB access 
controls. For example, the ZPR provides a way to deny read access to application programs. The 
ZPR can be used to classify storage by type; access by type can be changed without manipulating 
individual TLB entries. 


The PowerPC Architecture provides WIUOGE (write-back/write through, cacheability, user-defined 0, 
guarded, endian) storage attributes that control memory accesses, using bits in the TLB or, when 
address translation is disabled, storage attribute control registers. 


When address translation is enabled (MSR[IR, DR] = 1), storage attribute contro! bits in the TLB 
control the storage attributes associated with the current page. When address translation is disabled 
(MSR[IR, DR] = 0), bits in each storage attribute contro! register control the storage attributes 
associated with storage regions. Each storage attribute control register contains 32 fields. Each field 
sets the associated storage attribute for a 128MB memory region. See “Real-mode Storage Attribute 
Control” on page 6-17 for more information about the storage attribute control registers. 
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1.4.3 Timer Facilities 
The processor core contains a time base and three timers: 


e¢ Programmable Interval Timer (PIT) 
e Fixed Interval Timer (FIT) 
¢ Watchdog timer 


The time base is a 64-bit counter incremented either by an internal signal equal to the CPU clock rate 
or by a separate external timer clock signal. No interrupts are generated when the time base rolls 
over. 


The PIT is a 32-bit register that is decremented at the same rate as the time base is incremented. The 
user loads the PIT register with a value to create the desired delay. When a decrement occurs on a 
PIT count of 1, the timer stops decrementing, a bit is set in the Timer Status Register (TSR), anda 
PIT interrupt is generated. Optionally, the PIT can be programmed to reload automatically the last 
value written to the PIT register, after which the PIT begins decrementing again. The Timer Control 
Register (TCR) contains the interrupt enable for the PIT interrupt. 


The FIT generates periodic interrupts based on selected bits in the time base. Users can select one of 
four intervals for the timer period by setting the appropriate bits in the TCR. When the selected bit in 
the time base changes from 0 to 1, a bit is set in the TSR and a FIT interrupt is generated. The FIT 
interrupt enable is contained in the TCR. 


The watchdog timer generates a periodic interrupt based on selected bits in the time base. Users can 
select one of four time periods for the interval and the type of reset generated if the watchdog timer 
expires twice without an intervening clear from software. 


1.4.4 Debug 


The processor core debug facilities include debug modes for the various types of debugging used 
during hardware and software development. Also included are debug events that allow developers to 
control the debug process. Debug modes and debug events are controlled using debug registers in 
the chip. The debug registers are accessed either through software running on the processor, or 
through the JTAG port. The JTAG port can also be used for board test. 


The debug modes, events, controls, and interfaces provide a powerful combination of debug facilities 
for hardware and software development tools 


1.4.4.1 Development Tool Support 
The PPC405GP supports a wide range of hardware and software development tools. 


An operating system debugger is an example of an operating system-aware debugger, implemented 
using software traps. 


RISCWatch is an example of a development tool that uses the external debug mode, debug events, 
and the JTAG port to support hardware and software development and debugging. 


The RISCTrace™ feature of RISCWatch is an example of a development tool that uses the real-time 
trace capability of the processor core. 
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1.4.4.2 Debug Modes 


The internal, external, real-time-trace, and debug wait modes support a variety of debug tool used in 
embedded systems development. These debug modes are described in detail in “Debug Modes” on 
page 12-6. 

1.4.5 Processor Core Interfaces 


The processor core provides a range of I/O interfaces. 


1.4.5.1. Processor Local Bus 


The PLB-compliant interface provides separate 32-bit address and 64-bit data buses for the 
instruction and data sides. 


1.4.5.2 Device Control Register Bus 


The Device Control Register (DCR) bus interface provides access to on-chip registers for 
configuration and status of peripherals such as SDRAM, DMA and so on. 


These registers are accessed using the mfder and mtder instructions. 


1.4.5.3 Clock and Power Management 


This interface supports several methods of clock distribution and power management. 


1.4.5.4 JTAG 


The JTAG port is enhanced to support the attachment of a debug tool such as the RISCWatch 
product from IBM Microelectronics. Through the JTAG test access port, a debug too! can single-step 
the processor and interrogate internal processor state to facilitate software debugging. The 
enhancements comply with the IEEE 1149.1 specification for vendor-specific extensions, and are 
therefore compatible with standard JTAG hardware for boundary-scan system testing. 

1.4.5.5 Interrupts 


The processor core provides an interface to the UIC, an on-chip interrupt controller that is logically 

outside the processor core. The UIC combines asynchronous interrupt inputs from on-chip and off- 
chip sources and presents them to the processor core using a pair of interrupt signals: critical and 

non-critical. 


1.4.5.6 On-Chip Memory 


The on-chip memory (OCM) interface supports the implementation of instruction- and data-side 
memory that can be accessed at performance levels matching the cache arrays. 


The PPC405GP provides 4KB of OCM. 


1.5 Processor Core Programming Model 


The programming model is described in detail in Chapter 3, “Programming Model.” 
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The PowerPC instruction set and Special Purpose Registers (SPRs) provide a high degree of user 
control over configuration and operation of the processor core functional units. 


1.5.1 Data Types 


Processor core operands are bytes, halfwords, and words. Multiple words or strings of bytes can be 
transferred using the load/store multiple and load/store string instructions. Data is represented in twos 
complement notation or in unsigned fixed-point format. 


The address of a multibyte operand is always the lowest memory address occupied by that operand. 
Byte ordering can be selected as big endian (the lowest memory address of an operand contains its 
most significant byte) or as little endian (the lowest memory address of an operand contains its least 
significant byte). See “Byte Ordering” on page 3-28 for more information about big and little endian 
operation. 


1.5.2 Processor Core Register Set Summary 


The processor core registers can be grouped into basic categories based on function and access 
mode: general purpose registers (GPRs), special purpose registers (SPRs), the machine state 
register (MSR), the condition register (CR), and device control registers (DCRs). 


Chapter 25, “Register Summary,’ provides a register diagram and a register field description table for 
each register. 


1.5.2.1 General Purpose Registers 


The processor core contains 32 GPRs; each register contains 32 bits. The contents of the GPRs can 
be transferred from memory using load instructions and stored to memory using store instructions. 
GPRs, which are specified as operands in many instructions, can also receive instruction results and 
the contents of other registers. 


1.5.2.2 Special Purpose Registers 


Special Purpose Registers (SPRs), which are part of the PowerPC Architecture, are accessed using 
the mtspr and mfspr instructions. SPRs control the use of the debug facilities, timers, interrupts, 
storage control attributes, and other architected processor resources. 


All SPRs are privileged (unavailable to user-mode programs), except the Count Register (CTR), the 
Link Register (LR), SPR General Purpose Registers (SPRG4—SPRG7, read-only), and the Fixed- 
point Exception Register (XER). Note that access to the Time Base Lower (TBL) and Time Base 
Upper (TBU) registers, when addressed as SPRs, is write-only and privileged. However, when 
addressed as Time Base Registers (TBRs), read access to these registers is not privileged. See 
“Time Base Registers” on page 25-3 for more information. 


1.5.2.3 Machine State Register 


The processor core contains a 32-bit Machine State Register (MSR). The contents of a GPR can be 
written to the MSR using the mtmsr instruction, and the MSR contents can be read into a GPR using 
the mfmsr instruction. The MSR contains fields that control the operation of the processor core. 
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1.5.2.4 Condition Register 


The processor core contains a 32-bit Condition Register (CR). These bits are grouped into eight 4-bit 
fields, CR[CRO]—CR[CR7]. Instructions are provided to perform logical operations on CR fields and 
bits within fields and to test CR bits within fields. The CR fields, which are set by compare 
instructions, can be used to control branches. CR[CRO] can be set implicitly by arithmetic instructions. 


1.5.2.5 Device Control Registers 


DCRs, which are architecturally outside of the processor core, are accessed using the mtder and 
mfdcr instructions. DCRs are used to control, configure, and hold status for various functiona! units 
that are not part of the processor core. 


The mtder and mfdcr instructions are privileged, for all DCRs. Therefore, all accesses to DCRs are 
privileged. See “Privileged Mode Operation” on page 3-41. 


1.5.3 Memory-Mapped I/O Registers 


The memory-mapped I/O (MMIO) registers are accessed using load and store instructions. MMIO 
registers, which are outside processor core and which are not architected, are used to control, 
configure, and hold status for various functional units that are not part of the processor core. 


1.5.4 Addressing Modes 


The processor core supports the following addressing modes, which enable efficient retrieval and 
storage of data in memory: 


¢ Base plus displacement addressing 
¢ Indexed addressing 
¢ Base plus displacement addressing and indexed addressing, with update 


In the base plus displacement addressing mode, an effective address (EA) is formed by adding a 
displacement to a base address contained in a GPR (or to an implied base of 0). The displacement is 
an immediate field in an instruction. 


In the indexed addressing mode, the EA is formed by adding an index contained in a GPR to a base 
address contained in a GPR (or to an implied base of 0). 


The base plus displacement and the indexed addressing modes also have a “with update” mode. In 
“with update” mode, the effective address calculated for the current operation is saved in the base 
GPR, and can be used as the base in the next operation. The “with update” mode relieves the 
processor from repeatedly loading a GPR with an address for each piece of data, regardless of the 
proximity of the data in memory. 
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Chapter 2. On-Chip Buses 


The on-chip bus architecture, which consists of the processor local bus (PLB), on-chip peripheral bus 
(OPB), and device control register (DCR) bus, provides a link between the cache units in the 
processor core and other PLB and OPB master and slave devices used in the PPC405GP. These 
devices include the SDRAM controller, PC! bridge, DMA controller, and external bus controller. 


The PLB is a high performance bus used to access memory through bus interface units. The PLB 
master and slave assignments for the PPC405GP are listed in “PLB Masters and Slaves” on 
page 2-2. 


Lower performance peripherals (such as serial ports) are attached to the OPB. A bridge between the 
PLB and OPB enables data transfers between PLB masters and OPB slaves. DMA peripherals can 
also be OPB peripherals. 


The DCR bus is used primarily to access status and control registers of the various PLB and OPB 
masters and slaves. The DCR bus offloads status and control read and write transfers from the PLB. 
The DCR bus is not described further in this chapter. 


The following publications, which are available from your IBM representative and in the IBM 
Microelectronics technical library (www.chips.ibm.com), describe the on-chip bus architecture: 


¢ The CoreConnect™ Bus Architecture 

¢ Processor Local Bus Architecture Specifications 

¢ On-Chip Peripheral Bus Architecture Specifications 

¢ Device Control Register Bus Architecture Specifications 


The PPC405GP block diagram (Figure 1-1 on page 1-2) illustrates the on-chip bus structure of the 
PPC405GP. 


2.1. Processor Local Bus 


The PLB is a high-performance on-chip bus. The PLB supports read and write data transfers between 
master and slave devices equipped with a PLB interface and connected through PLB signals. 


Each PLB master is attached to the PLB through separate address, read data and write data buses, 
and transfer qualifier signals. PLB slaves are attached to the PLB through shared, but decoupled, 
address, read data and write data buses, and transfer contro! and status signals for each data bus. 


Access to the PLB is granted through a central arbitration mechanism that enables masters to 
compete for bus ownership. This arbitration mechanism provides for fixed and fair priority schemes. 


Timing for all PLB signals is provided by a clock source that is shared by all PLB masters and slaves. 
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2.1.1 PLB Features 


¢ Overlapping of read and write transfers allows two data transfers per clock cycle for maximum bus 
utilization 


¢ Decoupled address and data buses support split-bus transaction capability for improved bandwidth 


e Address pipelining reduces overall bus latency by allowing the latency associated with a new 
request to be overlapped with an ongoing data transfer in the same direction 


e Late master request abort capability reduces latency associated with aborted requests 

¢ Four levels of request priority and selectable arbitration modes provide flexible arbitration policies. 
¢ Support for 16-, 32-, and 64-byte line data transfers 

¢ Sequential burst protocol allows byte, halfword, and word burst data transfers. 


¢ DMA buffered peripheral-to-memory, memory-to-peripheral, and memory-to-memory operations 
are supported 


2.1.2 PLB Masters and Slaves 
Table 2-1 lists the PLB masters and slaves provided in the PPC405GP. 
Table 2-1. PPC405GP PLB Agents as Masters and Slaves 


PLB Master/Slave 
Master 
Master 
Master 
Slaves 


PCI bridge (PCI to PLB) Master 
PCI bridge (PLB to PCl) Slave 


Master 
Master 
Slave 
Slave 


The SDRAM and EBC slaves are connected in line with the decompression controller. When the 
decompression controller is disabled, a bypass mode that directly accesses SDRAM and the EBC is 
used. When the decompression controller is enabled, it intercepts reads from compressed regions 
before they reach SDRAM and the EBC. 


2.1.3 PLB Master Assignments 


Each PLB master can be programmed to use one of four priority levels during PLB transfers, enabling 
the system designer to tune PLB transfer priorities to the requirements of a particular application. For 
example, if an application always requires PCI to SDRAM transfers to have the lowest latency, the PCI 
master can be programmed to the highest PLB master priority. This causes the PLB arbiter to grant 
PCI access requests before granting the access requests of any other master. 
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Programming Note: PLB master priority assignments, which are application-dependent, must 
be considered carefully to prevent potential lockouts of lower priority masters. For most 
applications, assigning a priority of 0b10 to each master is a useful starting point. 


A register associated with each master controls the priority of that master. Table 2-2 lists the PLB 
masters and the register fields controlling the priority of the masters. Priorities range from Ob00 
(lowest) to 0b11 (highest). 


Table 2-2. Registers Controlling PLB Master Priority Assignments 


1 


Processor core data cache unit DCU | CCRO[DPP1] The high-order bit of 
CCRO[DPP'1] is controlled 
by the DCU logic, so only 
the low-order priority bit 

can be programmed. 


External bus master EBCO_CFG[EMPL] Which field sets external 
EBCO_CFG[EMPH] master priority depends 

upon the setting of the 

HoldPri signal. 


| 8 PCI bridge PCICO_BRDGOPT1[PRP] | Reset value is 0b11 
p 4 MAL MALO_CFGIPLEP) fee 


DMA controller Unique priorities can be 
assigned to each DMA 
channel. 


DMA0_CR3[CP] 


See “PLB Arbiter Control Register (PLBO_ACR)” on page 2-5 for information about programming the 
PLBO_ACR to control PLB priority mode and priority order, which determine how the PLB arbitrates 
simultaneous PLB bus access requests having equal priorities. 


2.1.4 PLB Transfer Protocol 
A PLB transaction is composed of an address cycle and a data cycle. 


The address cycle has three phases: request, transfer, and address acknowledge. A PLB transaction 
begins when a master drives its address and transfer qualifier signals and requests ownership of the 
bus during the request phase of the address cycle. Once bus ownership has been granted by the PLB 
arbiter, the master’s address and transfer qualifiers are presented to the slave devices during the 
transfer phase. 


During normal operation, the address cycle is terminated by a slave latching the master’s address 
and transfer qualifiers during the address acknowledge phase. 


Each data beat in the data cycle has two phases: transfer and data acknowledge. During the transfer 
phase, the master drives the write data bus for a write transfer or samples the read data bus for a read 
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transfer. Data acknowledge signals are required during the data acknowledge phase for each data 
beat in a data cycle. 


Note: For single-beat transfers, data acknowledge signals also indicate the end of the data transfer. 
For line or burst transfers, the data acknowledge signals apply to each beat and indicate the 
end of the data cycle only after the final beat. 


2.1.5 Overlapped PLB Transfers 


Figure 2-1 shows an example of overlapped PLB transactions on the read/write data buses with 
pipelining. PLB address, read data, and write data buses are decoupled from one another, allowing 
for address cycles to be overlapped with read or write data cycles, and for read data cycles to be 
overlapped with write data cycles. The PLB split-bus transaction capability allows the address and 
data buses to have different masters at the same time. 


PLB address pipelining capability enables a new bus transfer to begin before an ongoing transfer 
finishes. Address pipelining reduces overall bus latency on the PLB by enabling the latency 
associated with a new transfer request to be overlapped with an ongoing data transfer in the same 
direction. 


PLB masters A and B each present a read request followed by a write request. Master B gets the bus 
first, so its read is the primary read transaction. The master A address cycle begins as soon as the 
master B address cycle ends. The master A read is taken as a secondary transfer. Writes follow 
reads. 
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PLB Addr Bus 


Master A Write 
PLB Write Data | ——— 7 : 
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: z 
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ae SE a i i 
PABA [RIDA [IDA [RIDA [IDA [XDA IDA [XDA 


Mastot A Read 


PLB Read Data | 
Bus | 


Note: x/AA_ = Xfer/AddrAck 
X/DA_ = Xfer/DataAck 
X/AA:A = X/AA Master A 
X/AA:B = X/AA Master B 


Figure 2-1. Overlapped PLB Transfers 


Note: A master can begin to request ownership of the PLB in parallel with the address cycle or data 
cycle of another master bus transfer. Overlapped read and write data transfers and split-bus 
transactions enable the PLB to operate at a very high bandwidth. 
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2.1.6 PLB Arbiter Registers 
PLB arbiter registers are DCRs accessed using the mfder and mtdcr instructions. 


Table 2-3 summarizes the PLB arbiter DCRs. 


Table 2-3. PLB Arbiter Registers 


[winemonie Regier Name [Aacress | Aecass | Fase | 
PLBO_ACR PLB Arbiter Control! Register 0x087 


PLBO_BEAR PLB Error Address Register 0x086 | R/O | 25 | 
PLBO_BESR PLB Error Status Register Ox084 . 


2.1.6.1 PLB Arbiter Control Register (PLBO_ACR) 


The PLBO_ACR controls PLB arbitration priority, which is determined by PLB priority mode and PLB 
priority order. 


PPM HBU 


DEEIEIE | 3 Lea 


PPO 


Figure 2-2. PLB Arbiter Control Register (PLBO_ACR) 


PLB Priority Mode 
0 Fixed 
1 Fair 


PLB Priority Order 
000 Masters 0, 1, 2, 


100 Masters 4, 5, 0, 
101 Masters 5, 0, 1, 2, 
110 Reserved 

111 Reserved 


High Bus Utilization 
0 Disabled 
1 Enabled 


En Reserved 


2.1.6.2 PLB Error Address Register (PLBO_BEAR) 


The read-only PLBO_BEAR contains the address of the access on which a bus timeout error 
occurred. 


The PLBO_BEAR can be locked by the master. Once locked, the PLBO_BEAR cannot be updated, if a 
subsequent error occurs, until all PLBO_BESR[FLCKn] fields are cleared (nis the master ID). 
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Figure 2-3. PLB Error Address Register (PLBO_BEAR) 


0:31 | | Address of bus timeout error 


2.1.6.3 PLB Error Status Register (PLBO_BESR) 


The read/clear PLBO_BESR identifies timeout errors on PLB bus transfers, the master initiating the 
transfer, and the type of transfer. 


Each PLBO_BESR[PTEn] field (nis the master ID) can be locked by the master. Once locked, 
PLBO_BESR [PTEn] fields cannot be updated if a subsequent error occurs until the corresponding 
PLBO_BESR [FLCKh?] field is cleared. To clear a PLBO_BESR field, write 1 to the field. Writing 0 to a 
PLBO_BESR field does not affect the field. 


PTEO FLKO PTE1 FLK1 PTE2 FLK2 PTE3 FLK3 PTE4 FLK4 PTES5 FLKS 


ofa TaT+Ts 1 [rele oll fells] [of a[o[esee[aafe0 


R/WO ALKO R/W1 ALK1 R/W2 ALK2 RWS ALK3 R/W4 ALK4 R/AWS ALKS 


Figure 2-4. PLB Error Status Register (PLBO_BESR) 


Master 0 PLB Timeout Error Status Master 0 is the processor core ICU. 
0 No master 0 timeout error 
1 Master 0 timeout error 


Master 0 Read/Write Status 
0 Master 0 error operation was a write 
1 Master 0 ICU error operation was a read 


Master 0 PLBO_BESR Field Lock 
0 Master 0 PLBO_BESR field is unlocked 
1 Master 0 field is locked 


Master 0 PLBO_BEAR Address Lock 
0 Master 0 PLBO_BEAR is unlocked 
1 Master 0 PLBO_BEAR is locked 


Master 1 PLB Timeout Error Status Master 1 is the processor core DCU. 
0 No master 1 timeout error 
1 Master 1 timeout error 


Master 1 Read/Write Status 
0 Master 1 error operation was a write 
1 Master 1 error operation was a read 
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Master 1PLBO_BESR Field Lock 
O Master 1 PLBO_BESR field is unlocked 
1 Master 1 PLBO_BESR field is locked 


Master 1 PLBO_BEAR Address Lock 
O Master 1 PLBO_BEAR is unlocked 
1 Master 1 PLBO_BEAR is locked 


Master 2 PLB Timeout Error Status Master 2 is the external master. 
O No master 2 timeout error 
1 Master 2 timeout error 


Master 2 Read/Write Status 
0 Master 2 error operation was a write 
1 Master 2 error operation was a read 


Master 2 PLBO_BESR Field Lock 
O Master 2 PLBO_BESR field is unlocked 
1 Master 2 PLBO_BESR field is locked 


Master 2 PLBO_BEAR Address Lock 
O Master 2 PLBO_BEAR is unlocked 
1 Master 2 PLBO_BEAR is locked 


Master 3 PLB Timeout Error Status Master 3 is PCI. 
O No Master 3 timeout error 
1 Master 3 timeout error 


Master 3 Read/Write Status 
O Master 3 error operation was a write 
1 Master 3 error operation was a read 


Master 3 PLBO_BESR Field Lock 
O Master 3 PLBO_BESR field is unlocked 
1 Master 3 PLBO_BESR field is locked 


Master 3 PLBO_BEAR Address Lock 
O Master 3 PLBO_BEAR is unlocked 
1 Master 3 PLBO_BEAR is locked 


Master 4 PLB Timeout Error Status ’ Master 4 is MAL. 
O No master 4 timeout error 
1 Master 4 timeout error 


Master 4 Read/Write Status 
O Master 4 error operation was a write 
1 Master 4 error operation was a read 


Master 4 PLBO_BESR Field Lock 
0 Master 4 PLBO_BESR field is unlocked 
1 Master 4 field is locked 


Master 4 PLBO_BEAR Address Lock 
0 Master 4 PLBO_BEAR is unlocked 
1 Master 4 PLBO_BEAR is locked 


Master 5 PLB Timeout Error Status Master 5 is DMA. 
O No master 5 timeout error 
1 Master 5 timeout error 


Master 5 Read/Write Status 
0 Master 5 error operation was a write 
1. Master 5 error operation was a read 
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Master 5 PLBO_BESR Field Lock 
O Master 5 PLBO_BESR field is unlocked 
1 Master 5 PLBO_BESR field is locked 


Master 5 PLBO_BEAR Address Lock 


O Master 5 PLBO_BEAR is unlocked 
1 Master 5 PLBO_BEAR is locked 


Reserved 


2.1.7 PLB to OPB Bridge Registers 
The PLB to OPB bridge registers are DCRs accessed using the mfder and mtdcer instructions. 
Table 2-4 lists the PLB to OPB bridge registers. 


Table 2-4. PLB Arbiter Registers 


POBO_BEAR Bridge Error Address Register Ox0A2 


POBO_BESRO Bridge Error Status Register 0 Ox0A0 ae =e 5 
(Master IDs 0,1, 2, 3) 

POBO_BESR1 Bridge Error Status Register Ox0A4 R/Clear 
(Master IDs 4, 5) 


2.1.7.1. Bridge Error Address Register (POBO_BEAR). 


The read-only POBO_BEAR reports the address of a PLB to OPB transfer that results in an error. The 
PLB to OPB bridge writes the error address in the POBO_BEAR, unless the associated 
POBO_BESRim[ALCKr] field is set (mis either 0 or 1, depending on the master ID specified by n). 
Once locked, the PLB to OPB bridge cannot write POBO_BEAR until all POBO_BESRm[ALCKn] fields 
that are set are cleared. 


Figure 2-5. Bridge Error Address Register (POBO_BEAR) 


‘Ox0B2 | Address of bus error 


2.1.7.2 Bridge Error Status Registers (POBO_BESRO-POBO_BESR1) 


The PLB to OPB bridge writes error information into the appropriate POBO_BESR» register. (For 
master IDs 0, 1, 2, and 3, m= 0; for master IDs 4 and 5, m= 1.) 


POBO_BESRm fields can be locked using the POBO_BESRm[FLKn] and POBO_BESRn[ALKn] fields 
(nis the master ID). Once locked, the POBO_BESRm fields associated with a master cannot be 
overwritten if a subsequent error occurs until the locking fields are cleared. To clear a lock, write 1 to 
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the POBO_BESRm[FLKn] and POBO_BESRnALKn] fields that are set. Writing 0 to a lock field does 
not affect the field. 


Figure 2-6. Bridge Error Status Register 0 (POBO_BESR0O) 


PLB Timeout Error Status Master 0 Master 0 is the processor core ICU. 
00 No master 0 error occurred 

01 Master 0 timeout error occurred 

10 Master 0 slave error occurred 

11 Reserved 


Read Write Status Master 0 
0 Master 0 error operation is a read 
1 Master 0 error operation is a write 


POBO_BESRO Field Lock Master 0 
0 Master 0 POBO_BESRO field is unlocked 
1 Master 0 POBO_BESRO field is locked 


POBO_BEAR Address Lock Master 0 

O Master 0 POBO_BEAR address is 
unlocked 

1 Master 0 POBO_BEAR address is locked 


PLB Timeout Error Status Master 1 Master 1 is the processor core DCU. 
00 No master 1 error occurred 

01 Master 1 timeout error occurred 

10 Master 1 slave error occurred 

11 Reserved 


Read/Write Status Master 1 
O Master 1 error operation is a read 
1 Master 1 error operation is a write 


POBO_BESRO Field Lock Master 1 
O Master 1:POBO_BESRO field is unlocked 
1 Master 1 POBO_BESRO field is locked 


POBO_BEAR Address Lock Master 1 

O Master 1 POBO_BEAR address is 
unlocked 

1 Master 1 POBO_BEAR address is locked 


PLB Timeout Error Status Master 2 Master 2 is the external master. 
00 No master 2 error occurred 

01 Master 2 timeout error occurred 

10 Master 2 slave error occurred 

11 Reserved 


Read/Write Status Master 2 
0 Master 2 error operation is a read 
1 Master 2 error operation is a write 
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POBO_BESRO Field Lock Master 2 
0 Master 2 POBO_BESRDO field is unlocked 
1 Master 2 POBO_BESRO field is locked 


POBO_BEAR Address Lock Master 2 

O Master 2 POBO_BEAR address is 
unlocked 

1 Master 2 POBO_BEAR address is locked 


PLB Timeout Error Status Master 3 
00 No master 3 error occurred 

01 Master 3 timeout error occurred 
10 Master 3 slave error occurred 
11 Reserved 


Read/Write Status Master 3 
0 Master 3 error operation is a read 
1 Master 3 error operation is a write 


POBO_BESRO Field Lock Master 3 
0 Master 3 POBO_BESR0O field is unlocked 
1 Master 3 POBO_BESRO field is locked 


POBO_BEAR Address Lock Master 3 

0 Master 3 POBO_BEAR address is 
unlocked 

1 Master 3 POBO_BEAR address is locked 


Reserved 


Figure 2-7 illustrates POBO_BESR1. 


Master 3 is PCI. 


Figure 2-7. Bridge Error Status Register 1 (POBO_BESR1) 


PLB Timeout Error Status Master 4 
00 No Master 4 error occurred 

01 Master 4 timeout error occurred 
10 Master 4 slave error occurred 
11 Reserved 


Read/Write Status Master 4 


O Master 4 error operation is a read 
1 Master 4 error operation is a write 


POBO_BESRI1 Field Lock Master 4 
0 Master 4 POBO_BESR1’1 field is unlocked 
1 Master 4 POBO_BESR11 field is locked 
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Master 4 is MAL. 


Preliminary 


POBO_BEAR Address Lock Master 4 

0 Master 4 POBO_BEAR address is 
unlocked 

1 Master 4 POBO_BEAR address is locked 


PLB Timeout Error Status Master 5 Master 5 is DMA. 
00 No Master 5 error occurred 

01 Master 5 timeout error occurred 

10 Master 5 slave error occurred 

11 Reserved 


Read/Write Status Master 5 


O Master 5 error operation is a read 
1 Master 5 error operation is a write 


POBO_BESR1 Field Lock Master 5 
O Master 5 POBO_BESR_1 field is unlocked 
1 Master 5 POBO_BESR1 field is locked 


POBO_BEAR Address Lock Master 5 

O Master 5 POBO_BEAR address is 
unlocked 

1 Master 5 POBO_BEAR address is locked 


Reserved 


2.1.7.3 On-Chip Peripheral Bus 


The OPB is used to attach peripherals that do not require the bandwidth of the PLB. The OPB does 
not connect directly to the PPC405GP processor core, which accesses peripherals attached to the 
OPB through a PLB-to-OPB bridge. 


2.1.8 OPB Features 

The on-chip peripheral bus features: 

¢ A 32-bit address bus and a 32-bit data bus 

e Dynamic bus sizing; byte, halfword, and word transfers 

e Byte and halfword duplication for byte and halfword transfers 

e Single-cycle transfer of data between OPB bus master and OPB slaves 
¢ Sequential address (burst) protocol support 


¢ Devices on the OPB may be memory mapped, act as DMA peripherals, or support both transfer 
methods 


¢ A 16-cycle fixed bus timeout provided by the OPB arbiter 
¢ Bus parking for reduced latency 


e Bus arbitration overlapped with last cycle of bus transfers 
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2.1.9 OPB Master Assignments 


Table 2-1 lists the OPB masters. (The numbering reflects that the PPC405GP implements two 
masters; the OPB can support four masters.) 


Table 2-5. PPC405GP OPB Master Assignments 


OPB Agents Description 


DMA controller DMA (master 0) 


OPB to PLB bridge | OPB to PLB bridge (master 2) 


2.1.10 OPB Arbiter Registers 


The OPB arbiter contains the MMIO registers summarized in Table 2-6. 


Table 2-6. PLB Arbiter a 


[Winemonie Replster Name ee 
OPBAO_CR OPB Arbiter Control Register OxEF600601 
OPBAO_PR OPB Arbiter Priority Register OxEF600600 


2.1.10.1 OPB Arbiter Control Register (OPBAO_CR) 


The OPBAO_CR fields controls updating of the OPBAO_PR (described in “OPB Arbiter Priority 
Register (OPBAO_PR)” on page 2-13). Because the PPC405GP provides two masters, master IDs 1 
and 3 are ignored. 


Figure 2-8. OPB Arbiter Control Register (OPBAO_CR) 
Dynamic Priority Enable . 
0 Dynamic priority disabled 
1 Dynamic priority enabled 


Park Enable 
0 Park disabled 
1 Park enabled 
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Park on Master Not Last 
0 Park on master last 
1 Park on master not last 


Parked Master ID Master 0 is DMA; master 2 is the OPB to 
00 Master ID 0 PLB bridge. 


01 Reserved 
10 Master ID 2 
11 Reserved 


i 


2.1.10.2 OPB Arbiter Priority Register (OPBAO_PR) 


The OPBAO_PR assigns priorities to the OPB master IDs. Because the PPC405 provides two 
masters, master IDs 1 and 3 are ignored. At reset, master ID 0 (DMA) has a higher priority than 
master 2 (OPB to PLB bridge). 


-MIDO 


ez [es] | 


Figure 2-9. OPB Arbiter Priority Register (OPBAO_PR) 


High Priority Master ID 
00 Master ID 0 

01 Reserved 

10 Reserved 

11 Reserved 


a 


Low Priority master ID At reset, this priority is assigned to the OPB 
00 Reserved to PLB bridge. 

01 Reserved 

10 Master ID 2 

11 Reserved 


At reset, this priority is assigned to DMA. 


Preliminary On-Chip Buses 2-13 


2-14 PPC405GP User’s Manual Preliminary 


Part Il. The PPC405GP RISC Processor 


Preliminary 
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Chapter 3. Programming Model 


The programming model of the PPC405GP embedded processor describes the following features 
and operations: 


¢ Memory organization and addressing, starting on page 3-1 
e Registers, starting on page 3-3 

e Data types and alignment, starting on page 3-26 

¢ Byte ordering, starting on page 3-28 

e Instruction processing, starting on page 3-33 

¢ Branching control, starting on page 3-34 

¢ Speculative accesses, starting on page 3-37 

¢ Privileged mode operation, starting on page 3-41 

¢ Synchronization, starting on page 3-43 


¢ Instruction set, starting on page 3-47 


3.1. User and Privileged Programming Models 


The PPC405GP executes programs in two modes, also referred to as states. Programs running in 
privileged mode (also referred to as the supervisor state) can access any register and execute any 
instruction. These instructions and registers comprise the privileged programming model. In user 
mode, certain registers and instructions are unavailable to programs. This is also called the problem 
state. Those registers and instructions that are available comprise the user programming model. 


Privileged mode provides operating system software access to all processor resources. Because 
access to certain processor resources is denied in user mode, application software runs in user 
mode. Operating system software and other application software is protected from the effects of an 
errant application program. 


Throughout this book, the terms user program and privileged programs are used to associate 
programs with one of the programming models. Registers and instructions are described as user or 
privileged. Privileged mode operation is described in detail in “Privileged Mode Operation” on 

page 3-41. 

3.2 Memory Organization and Addressing 


The PowerPC Architecture defines a 32-bit, 4-gigabyte (GB) address space for instructions and data. 
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3.2.1. Physical Address Map 
Table 3-1 illustrates the physical address map. 


Table 3-1. PPC405GP Address Space 


| rneion | nts | rss | seo 
Address Address 

_ Reseed’ = = | OxE8010000 | OXES7FFFFF |@MB-64KB a 
“Reserved (PCI does not respond) | OxECO00000 | OxEEBFFFFF [44MB 0 


_ Reserved _OxEEC00008° AMB-3B 


PCI Interrupt Acknowledge (read) OxEED00000 | OxEED00003 
PCI Special Cycle (write) OxEED00000 | O0xEED00003 
_ Reserved j= =. | OxGED00004 | OxEEDFFFFF |){IMB4B 2 2 


Te a aa OxEEE00000 | OxEF3FFFFF |6MB 


1. The local memory/peripheral area of the memory map can be configured for SDRAM, ROM, or peripherals. 


___ Reserved (PCI does not respond 


B-64B 


2. The boot ROM and expansion ROM areas of the memory map are intended for ROM or flash devices. The 
controller supports volatile memory devices such as SDRAM and SRAM in these areas. 


3. When booting from PCI memory, the boot ROM address space begins at OxFFFE 0000 (size is 128KB). 
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3.2.2 Storage Attributes 


The PowerPC Architecture defines storage attributes that control data and instruction accesses. 
Storage attributes are provided to control cache write-through policy (the W storage attribute), 
cachability (the | storage attribute), memory coherency in multiprocessor environments (the M 
storage attribute), and guarding against speculative memory accesses (the G storage attribute). The 
IBM PowerPC Embedded Environment defines additional storage attributes for storage compression 
(the UO storage attribute) and byte ordering (the E storage attribute). 


The PPC405GP provides two control mechanisms for the W, |, UO, G, and E attributes. Because the 
PPC405GP does not provide hardware support for multiprocessor environments, the M storage 
attribute, when present, has no effect. 


When the PPC405GP operates in virtual mode (address translation is enabled), each storage 
attribute is controlled by the W, I, UO, G, and E fields in the translation lookaside buffer (TLB) entry for 
each memory page. The size of memory pages, and hence the size of storage attribute control 
regions, is variable. Multiple sizes can be in effect simultaneously on different pages. 


When the PPC405GP operates in real mode (address translation is disabled), storage attribute 
control registers control the corresponding storage attributes. These registers are: 


¢ Data Cache Write-through Register (DCWR) 
¢ Data Cache Cachability Register (DCCR) 

¢ Instruction Cache Cachability Register (ICCR) 
e Storage Guarded Register (SGR) 

¢ Storage Little-Endian Register (SLER) 

¢ Storage User-defined 0 Register (SUOR) 


Each storage attribute control register contains 32 bits; each bit controls one of thirty-two 128MB 
storage attribute control regions. Bit 0 of each register controls the lowest-order region, with 
ascending bits controlling ascending regions in memory. The storage attributes in each storage 
attribute region are set independently of each other and of the storage attributes for other regions. 


3.3 Registers 


All PPC405GP registers are listed in this section. Some of the frequently-used registers are described 
in detail. Other registers are covered in their respective topic chapters (for example, the cache 
registers are described in Chapter 4, “Cache Operations”). All registers are summarized in 

Chapter 25, “Register Summary.’ 


The registers are grouped into categories: General Purpose Registers (GPRs), Special Purpose 
Registers (SPRs), Time Base Registers (TBRs), the Machine State Register (MSR), the Condition 
Register (CR), Device Control Registers (DCRs), and memory-mapped 1/O registers (MMIO). 
Different instructions are used to access each category of registers. 


For all registers with fields marked as reserved, the reserved fields should be written as 0 and read as 
undefined. That is, when writing to a register with a reserved field, write a 0 to the reserved field. 
When reading from a register with a reserved field, ignore that field. 
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Programming Note: A good coding practice is to perform the initial write to a register with 
reserved fields as described, and to perform all subsequent writes to the register using a read- 
modify-write strategy: read the register, use logical instructions to alter defined fields, leaving 
reserved fields unmodified, and write the register. 


Figure 3-1 on page 3-5 illustrates the registers in the user and supervisor programming models. 
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User Model 


General-Purpose Registers 


Supervisor Model 
Machine State Register Processor Version Register 


MSR PVR SPR 0x11F 


a 
3 
@ 
2 
7 
» 
9. 
= 
© 
7) 


Core Configuration Register 
Time Base Registers 


TBL SPR 0x11C 
TBU SPR 0x11D 


CCRO SPR 0x3B3 


SPR General Registers 


SPR 0x110 
SPR General Registers (read-only) Bae Guia Timer Control Register 
| SPRG4 | SPR oxt04 SPR 0x112 a 
| spRGSs | SPR 0x105 SPR 0x113 Timer Status Register 
| sPRGS | SPRoxtos Ba TSR | SPROx3D8 
| SPRG7 SPR 0x107 SPRox115 Programmable Interval Timer 


User SPR Genera! Register 0 (read/write) SPR 0x116 FT SPR 0x3DB 


USPRGO SPR 0x100 SPR 0x117 


Debug Registers . 
Debug Status Register 


Condition Register 


CR 


Exception Handling Registers 
Exception Vector Prefix Register DBSR SPR 0x3FO 


EVPR SPR 0x3D5 


Debug Control Registers 
Exception Syndrome Register DBCRO SPR Ox3F2 
ESR SPR 0x3D4 DBCR1 SPR 0x3BD 


Fixed-Point Exception Register 


XER SPR 0x001 


Link Register 
Data Exception Address Register 


DEAR SPR 0x3D5 


Data Address Compares 


DAC1 SPR 0x3F6 
Save/Restore Registers DAC2 SPR 0x3F7 


LR SPR 0x008 


Count Register 


CTR 


SPR 0x009 


SPR Ox01A Data Value Compares 
Time Base Registers (read-only) SPR 0x01B DVC1 SPR 0x3B6 
TBL TBR 0x10C SPR Ox3DE Dvc2. | SPR 0x3B7 
TBU TBR 0x10D SPR Ox3DF 
Instruction Address Compares 
Storage Attribute Control Registers Memory seca Registers SPR 0x3F4 
rocess 
DCCR SPR OxSFA Sena ana: IAC2 SPR Ox3F5 
x 
BOR. (| eR Oe8 IAC3. | SPR 0x3B4 
Zone Protection Register 
ICCR | SPR 0x3FB ° laca |: SPROx3B5 
SGR SPR 0x3B9 ZPR SPR 0x3B0O 
Instruction Cache Debug Data Register 
SLER SPR 0x3BB 
ICDBR SPR 0x3D3 
SUOR SPR 0x3BC 


Figure 3-1. PPC405GP Programming Model—Registers 
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3.3.1 General Purpose Registers (RO-R31) 


The PPC405GP contains thirty-two 32-bit general purpose registers (GPRs). Data from memory can 
be read into GPRs using load instructions and the contents of GPRs can be written to memory using 
store instructions. Most integer instructions use GPRs for source and destination operands. See 
Table 25-1, “PPC405GP General Purpose Registers,” on page 25-1 for the numbering of the GPRs. 


Figure 3-2. General Purpose Registers (RO-R31) 


0:31 a General Purpose Register data 


3.3.2 Special Purpose Registers 


Special purpose registers (SPRs), which are part of the PowerPC Architecture and the IBM PowerPC 
Embedded Environment, are accessed using the mtspr and mfspr instructions. 


SPRs control the operation of debug facilities, timers, interrupts, storage control attributes, and other 
architected processor resources. Table 25-2, “Special Purpose Registers,” on page 25-2 shows the 
mnemonic, name, and number for each SPR. Table 3-2, “PPC405GP SPRs,” on page 3-7 lists the 
PPC405GP SPRs by function and indicates the pages where the SPRs are described more fully. 


Except for the Link Register (LR), the Count Register (CTR), the Fixed-point Exception Register 
(XER), User SPR General 0 (USPRGO, and read access to SPR General 4—7 (SPRG4—-SPRG7), all 
SPRs are privileged. As SPRs, the registers TBL and TBU are privileged write-only; as TBRs, these 
registers can be read in user mode. Unless used to access non-privileged SPRs, attempts to execute 
mfspr and mtspr instructions while in user mode cause privileged violation program interrupts. See 
“Privileged SPRs” on page 3-42. 
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Table 3-2. PPC405GP SPRs 


ee 
cn 2 OO eee 
a a Se 

[DAC1 |DAC2 Privileged 
Debug |DBSA | 

fopapa [*dPrvieged [a 
Gc ae eee ee) 


juseR@o[ UT 


DEAR Privileged 10-34 


Interrupts and Exceptions 
are [SAR 
PVR eee ee read-only 


DooR 
[DCWR Privileged 
CCR | Privileged = 
Storage Attribute Control |/SGR = == Privileged 
SLER Fituleged 
SU0R 


-. a 
Privileged 
Privileged 


3.3.2.1. Count Register (CTR) 


The CTR is written from a GPR using mtspr. The CTR contents can be used as a loop count that is 
decremented and tested by some branch instructions. Alternatively, the CTR contents can specify a 
target address for the bectr instruction, enabling branching to any address. 


General-Purpose SPR 


Timer Facilities 


The CTR is in the user programming model. 
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Figure 3-3. Count Register (CTR) 


Used as count for branch conditional with 
decrement instructions, or as address for 


branch-to-counter instructions. 


3.3.2.2 Link Register (LR) 


The LR is written from a GPR using mtspr, and by branch instructions that have the LK bit set to 1. 
Such branch instructions load the LR with the address of the instruction following the branch 
instruction. Thus, the LR contents can be used as the return address for a subroutine that was called 
using the branch. 


The LR contents can be used as a target address for the belr instruction. This allows branching to any 
address. 


When the LR contents represent an instruction address, LRgo.3, are assumed to be 0, because all 
instructions must be word-aligned. However, when LR is read using mfspr, all 32 bits are returned as 
written. 


The LR is in the user programming model. 


Figure 3-4. Link Register (LR) 


0:31 Link Register contents If (LR) represents an instruction address, 
LR30:31 should be 0. 


3.3.2.3 Fixed Point Exception Register (XER) 
The XER records overflow and carry conditions generated by integer arithmetic instructions. 


The Summary Overflow (SO) field is set to 1 when instructions cause the Overflow (OV) field to be set 
to 1. The SO field does not necessarily indicate that an overflow occurred on the most recent 
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arithmetic operation, but that an overflow occurred since the last clearing of XER[SO]. mtspr(XER) 
sets XER[SO, OV] to the value of bit positions 0 and 1 in the source register, respectively. 


Once set, XER[SO] is not reset until an mtspr(XER) is executed with data that explicitly puts a 0 in 
the SO bit, or until an merxr instruction is executed. 


XER[OV] is set to indicate whether an instruction that updates XER[OV] produces a result that 
“overflows” the 32-bit target register. XER[OV] = 1 indicates overflow. For arithmetic operations, this 
occurs when an operation has a carry-in to the most-significant bit of the result that does not equal 
the carry-out of the most-significant bit (that is, the exclusive-or of the carry-in and the carry-out is 1). 


The following instructions set XER[OV] differently. The specific behavior is indicated in the instruction 
descriptions in Chapter 24, “Instruction Set.” 


¢ Move instructions: 
merxr, mtspr(XER) 
e Multiply and divide instructions: 
mullwo, mullwo., divwo, divwo., divwuo, divwuo 


The Carry (CA) field is set to indicate whether an instruction that updates XER[CA] produces a result 
that has a carry-out of the most-significant bit. XER[CA] = 1 indicates a carry. 


The following instructions set XER[CA] differently. The specific behavior is indicated in the instruction 
descriptions in Chapter 24, “Instruction Set.” 


¢ Move instructions 
merxr, mtspr(XER) 
¢ Shift-algebraic operations 
sraw, srawi 
The Transfer Byte Count (TBC) field is the byte count for load/store string instructions. 


The XER is part of the user programming model. 
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SO CA . TBC 


Figure 3-5. Fixed Point Exception Register (XER) 


Summary Overflow Can be set by mtspr or by using “o” form 
0 No overflow has occurred. instructions; can be reset by mtspr or by 
1 Overflow has occurred. merxr. 


Overflow Can be set by mtspr or by using “o” form 
0 No overflow has occurred. instructions; can be reset by mtspr, by 
0 Overflow has occurred. merxr, or “o” form instructions. 


Carry Can be set by mtspr or arithmetic 

0 Carry has not occurred. instructions that update the CA field; can 

1 Carry has occurred. be reset by mtspr, by merxr, or by 
arithmetic instructions that update the CA 
field. 


Reserved 
aie Transfer Byte Count Used by Iswx and stswx; written by mtspr. 


Table 3-3 and Table 3-4 list the PPC405GP instructions that update the XER. In the tables, the syntax 
“[o]” indicates that the instruction has an “o” form that updates XER[SO,OV], and a “non-o” form. The 
syntax “[.]’ indicates that the instruction has a “record” form that updates CR[CRO] (see “Condition 
Register (CR)” on page 3-12), and a “non-record” form. 


Table 3-3. XER[CA] Updating Instructions 


addcfo][.] | subfc[o][.] 
adde[o][.] subfe[o][.] 
addic[.] subfic 
addme[o][.] | subfmef[o][-] 
addze[o][.] | subfze[o]|[.] 
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Table 3-4. XER[SO,OV] Updating Instructions 


Processor 
Integer Arithmetic Auxiliary Processor Control 
Negative 
Multiply- Multiply- Register 
Multiply Negate | Accumulate | Accumulate | Management 


addo[.] subfo[.] divwo[.] macchwo[.] nmacchwo[.] 
addcof.] | subfco[.] divwuo].] macchwsoj.] | nmacchwsof[.] 
addeo[.] | subfeo[.] macchwsuo[.] | nmachhwo[.} 
addmeo[.] | subfmeof[.] macchwuo[.] | nmachhwso[.] 
addzeo[.] | subfzeo[.] machhwoj[.] nmaclhwoJ.] 

machhwso[.] | nmaclhwso[.] 

machhwsuo[.] 

machhwuo[.] 

maclhwof.] 

maclhwsof.] 

maclhwsuo[.] 

maclhwuo[.] 


3.3.2.4 Special Purpose Register General (SPRGO-SPRG7) 


USPRGO and SPRGO-SPRG7 are provided for general purpose software use. For example, these 
registers are used as temporary storage locations. For example, an interrupt handler might save the 
contents of a GPR to an SPRG, and later restore the GPR from it. This is faster than a save/restore to 
a memory location. These registers are written using mtspr and read using mfspr. 


Access to USPRGO is non-privileged for both read and write. 


SPRGO-SPRG7 provide temporary storage locations. For example, an interrupt handler might save 
the contents of a GPR to an SPRG, and later restore the GPR from it. This is faster than performing a 
save/restore to memory. These registers are written by mtspr and read by mfspr. 


Access to SPRGO-SPRG7 is privileged, except for read access to SPRG4-SPRG7. See “Privileged 
SPRs’” on page 3-42 for more information. 


Figure 3-6. Special Purpose Register General (SPRGO-SPRG7) 


0:31 iP tl General data Software value; no hardware usage. 
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3.3.2.5 Processor Version Register (PVR) 


The PVR is a read-only register that uniquely identifies a standard product or Core+ASIC 
implementation. Software can examine the PVR to recognize implementation-dependent features and 
determine available hardware resources. 


Access to the PVR is privileged. See “Privileged SPRs’” on page 3-42 for more information. 


Figure 3-7. Processor Version Register (PVR) 


0:31 fal Assigned PVR value 


3.3.3 Condition Register (CR) 


The CR contains eight 4-bit fields (CRO-CR7), as shown in Figure 3-8. The fields contain conditions 
detected during the execution of integer or logical compare instructions, as indicated in the instruction 
descriptions in Chapter 24, “Instruction Set.” The CR contents can be used in conditional branch 
instructions. 


The CR can be modified in any of the following ways: 


¢ mtcrf sets specified CR fields by writing to the CR from a GPR, under control of a mask specified 
as an instruction field. 


¢ merf sets a specified CR field by copying another CR field to it. 


¢ merxr copies certain bits of the XER into a designated CR field, and then clears the corresponding 
XER bits. 


¢ The “with update” forms of integer instructions implicitly update CR[CRO]. 
e Integer compare instructions update a specified CR field. 


¢ The CR-logical instructions update a specified CR bit with the result of a logical operation on a 
specified pair of CR bit fields. 


¢ Conditional branch instructions can test a CR bit as one of the branch conditions. 


If a CR field is set by a compare instruction, the bits are set as described in “CR Fields after Compare 
Instructions.” 


The CR is part of the user programming model. 
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CRO CR2 CR4 CR6 


C34 7s We eC 


CR1 CR3 CR5 CR7 


Figure 3-8. Condition Register (CR) 


Condition Register Field 0 
Condition Register Field 1 
Condition Register Field 2 
12:15 Condition Register Field 3 
16:19 Condition Register Field 4 
20:23 Condition Register Field 5 
24:27 Condition Register Field 6 
28:31 Condition Register Field:7 


3.3.3.1 CR Fields after Compare Instructions 


Compare instructions compare the values of two 32-bit registers. The two types of compare 
instructions, arithmetic and logical, are distinguished by the interpretation given to the 32-bit values. 
For arithmetic compares, the values are considered to be signed, where 31 bits represent the 
magnitude and the most-significant bit is a sign bit. For logical compares, the values are considered to 
be unsigned, so all 32 bits represent magnitude. There is no sign bit. As an example, consider the 
comparison of 0 with OxFFFF FFFF. In an arithmetic compare, 0 is larger, because OxFFFF FFFF 
represents —1; in a logical compare, OxFFFF FFFF is larger. 


A compare instruction can direct its CR update to any CR field. The first data operand of a compare 
instruction specifies a GPR. The second data operand specifies another GPR, or immediate data 
derived from the IM field of the immediate instruction form. The contents of the GPR specified by the 
first data operand are compared with the contents of the GPR specified by the second data operand 
(or with the immediate data). See descriptions of the compare instructions (page 24-34 through 
page 24-37) for precise details. , 


After a compare, the specified CR field is interpreted as follows: 


LT (bit 0) The first operand is less than the second operand. 
GT (bit 1) The first operand is greater than the second operand. 
EQ (bit 2) The first operand is equal to the second operand. 

SO (bit 3) Summary overflow; a copy of XER[SO]}. 
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3.3.3.2 The CRO Field 


After the execution of compare instructions that update CR[CRO], CR[CRO] is interpreted as 
described in “CR Fields after Compare Instructions” on page 3-13. The “dot” forms of arithmetic and 
logical instructions also alter CR[CRO]. After most instructions that update CR[CRO], the bits of CRO 
are interpreted as follows: 


LT (bit 0) Less than 0; set if the most-significant bit of the 32-bit result is 1. 

GT (bit 1) Greater than 0; set if the 32-bit result is non-zero and the most- 
significant bit of the result is 0. 

EQ (bit 2) Equal to 0; set if the 32-bit result is 0. 

SO (bit 3) Summary overflow; a copy of XER[SO] at instruction completion. 


The CR[CRO]_r, gt, eq subfields are set as the result of an algebraic comparison of the instruction 
result to 0, regardless of the type of instruction that sets CR[CRO]. If the instruction result is 0, the EQ 
subfield is set to 1. If the result is not 0, either LT or GT is set, depending on the value of the most- 
significant bit of the result. 


When updating CR[CRO], the most significant bit of an instruction result is considered a sign bit, even 
for instructions that produce results that are not usually thought of as signed. For example, logical 
instructions such as and., or., and nor. update CR[CRO],7. gt, Eq using such an arithmetic comparison 
to 0, although the result of such a logical operation is not actually an arithmetic result. 


If an arithmetic overflow occurs, the “sign” of an instruction result indicated in CR[CRO].+ et, eq might 
not represent the “true” (infinitely precise) algebraic result of the instruction that set CRO. For 
example, if an add. instruction adds two large positive numbers and the magnitude of the result 
cannot be represented as a twos-complement number in a 32-bit register, an overflow occurs and 
CR[CRO].7, so are set, although the infinitely precise result of the add is positive. 


Adding the largest 32-bit twos-complement negative number, 0x8000 0000, to itself results in an 
arithmetic overflow and 0x0000 0000 is recorded in the target register. CR[CRO]eq so is set, 
indicating a result of 0, but the infinitely precise result is negative. 


The CR[CRO]so subfield is a copy of XER[SO]. Instructions that do not alter the XER[SO] bit cannot 
cause an overflow, but even for these instructions CR[CRO]so is a copy of XER[SO]. 


Some instructions set CR[CRO] differently or do not specifically set any of the subfields. These 
instructions include: 


¢ Compare instructions 

cmp, cmpi, cmp, cmpli 
¢ CR logical instructions 

crand, crandc, creqy, crnand, crnor, cror, crorc, crxor, merf 
¢ Move CR instructions 

mtcerf, merxr 


e stwex. 


The instruction descriptions provide detailed information about how the listed instructions alter 
CR[CRO]. 
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3.3.4 The Time Base 


The PowerPC Architecture provides a 64-bit time base. “Time Base” on page 11-2 describes the 
architected time base. Access to the time base is through two 32-bit time base registers (TBRs). The 
least-significant 32 bits of the time base are read from the Time Base Lower (TBL) register and the 
most-significant 32 bits are read from the Time Base Upper (TBU) register. 


User-mode access to the time base is read-only, and there is no explicitly privileged read access to 
the time base. 


The mftb instruction reads from TBL and TBU. Writing the time base is accomplished by moving the 
contents of a GPR to a pair of SPRs, which are also called TBL and TBU, using mtspr. 


Table 3-5 shows the mnemonics and names of the TBRs. 


Table 3-5. Time Base Registers 


Tinemenis[ FogiterName [Aeros 


Time Base Lower (Read-only) Read-only 
Time Base Upper (Read-only) Read-only 


3.3.5 Machine State Register (MSR) 


The Machine State Register (MSR) controls processor core functions, such as the enabling or 
disabling of interrupts and address translation. 


The MSR is written from a GPR using the mtmsr instruction. The contents of the MSR can be read 
into a GPR using the mfmsr instruction. MSR[EE] is set or cleared using the wrtee or wrteei 
instructions. 


The MSR contents are automatically saved, altered, and restored by the interrupt-handling 
mechanism. See “Machine State Register (MSR)” on page 10-28. 


CE PR ME DWE DR 


a 


WE 


EE 


Figure 3-9. Machine State Register (MSR) 


fore [reseed 
rT Wait State Enable If MSR[WE] = 1, the processor remains in 

0 Critical interrupts are disabled. watchdog timer first time-out interrupts. 

1 Critical interrupts are enabled. 


15 |e Reserved 


0 The processor is not in the wait state. the wait state until an interrupt is taken, a 
1 The processor is in the wait state. reset occurs, or an external debug tool 
clears WE. 


Critical Interrupt Enable Controls the critical interrupt input and 
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External Interrupt Enable - Controls the non-critical external interrupt 
0 Asynchronous interrupts (external to the —_ input, PIT, and FIT interrupts. 

processor core) are disabled. 
1 Asynchronous interrupts are enabled. 


Problem State 

0 Supervisor state (all instructions 
allowed). 

1 Problem state (some instructions not 
allowed). 


Machine Check Enable 
0 Machine check interrupts are disabled. 
1 Machine check interrupts are enabled. 


Reserved 
Debug Wait Enable 


0 Debug wait mode is disabled. 
1 Debug wait mode is enabled. 


Debug Interrupts Enable 
0 Debug interrupts are disabled. 
1 Debug interrupts are enabled. 


0 Instruction address translation is 
disabled. 


1 Instruction address translation is 
enabled. 


Data Relocate 
0 Data address translation is disabled. 
1 Data address translation is enabled. 


ees [reed 


3.3.6 Device Control Registers 


Device Control Registers (DCRs), on-chip registers that exist architecturally outside the processor 
core, are not part of the IBM PowerPC Embedded Environment. The Embedded Environment simply 
defines the existence of a DCR address space and the instructions that access the DCRs, but does 
not define any DCRs. The instructions that access the DCRs are mtder (move to device control 
register) and mfder (move from device control register). 


DCRs are used to control the operations of on-chip buses, peripherals, and some processor behavior. 
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3.3.6.1 Directly Accessed DCRs 
The following DCRs are directly accessed; that is, they are accessed using their DCR numbers. 


Table 3-6. Directly Accessed DCRs 


DCR 
Register Number Description 


DCRs Used for Indirect Access 


PGs Usedifor Indirect Aceees ee | 
SDRAMO_CFGDATA Memory Controller Data Register 
DCPO_CFGADDR Decompression Controller Address Register 


DCPO_CFGDATA 0x015 Decompression Controller Data Register 
On-Chip Memory 


OCMO_ISARC 0x018 R/W OCM Instruction-Side Address Range Compare 
Register 


OCMO_ISCNTL 0x019 OCM Instruction-Side Contro! Register 


POBOLBEAR | _0x02_[R | PLB 10 OPBBus Error Aduress Register__—_—| 
[PoB0_BEsRi 


Clocking, Power Management, and Chip Control 


CPCO_PLLNA 
CPCO_CRO RW 
CPCO_OR RaW 
CPCO_PSR 


HE eae 

GPG0-JTAGID | —ox085 [Raa TD Register 
OPCO-SF 0088 [RT oPi status Regitor | 
OPCO_ER 
CPCO_FR | Ox0BA {RW | CPM Force Register 

wa 
1008 [| UIC Masked Status Regier] 
[uico-vR_—_| cr R__[UIG Vector Register 
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Table 3-6. Directly Accessed DCRs (continued) 


DCR 
Register Number Description 


Direct Memory Access 


Tae 
DMA Polarity Configuration Register 


Media Access Layer 


MALO_CFG 0x180 MAL Configuration Register 
MALO_ESR 0x181 R/Clear Error Status Register 
MALO_IER Interrupt Enable Register 


MALO_TXCASR 
MALO_TXCARR 
MALO_TXEOBISR 
MALO_TXDEIR 
MALO_RXCASR 
MALO_RXCARR 
MALO_RXEOBISR niClea 


MALO_RXDEIR 0x193 R/Clear Rx Descriptor Error Interrupt Register 


R. 
MALO_TXCTPOR 0x1A0 R/W Channel Tx 0 Channel Table Pointer Register 
MALO_TXCTP1R OxtAt R/W Channel Tx 1 Channel Table Pointer Register 

BR : 

R 


MALO_RXCTPOR 0x1C0 Channel Rx 0 Channel Table Pointer Register 
MALO_RCBSO 0x1E0 Channel RX 0 Channel Buffer Size Register 
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3.3.6.2 Indirectly Accessed DCRs 

The DCRs for the SDRAM controller, external bus controller (EBC), and decompression controller are 
indirectly accessed. 

3.3.7. Indirect Access of SDRAM Controller DCRs 

The following procedure accesses the SDRAM controller DCRs listed in Table 3-7. 

1. Write the offset from Table 3-8 to the Memory Controller Address Register (SDRAMO_CFGADDR). 
2. Read data from or write data to the Memory Controller Data Register (SDRAMO_CFGDATA). 


Table 3-7. SDRAM Controller DCR Usage 


DCR 
Register Number Description 


SDRAMO_CFGADDR 0x010 Memory Controller Address Register 
SDRAMO_CFGDATA 0x011 Memory Controller Data Register 


Table 3-8. Offsets for SDRAM Controller eee 


[register | —ofeet [| —___besription 
SDRAWO_ATR 
[SoRANG-TA [0 [Rw | Sona rng Regier 
[SDRAWO_ECCESR [xe [R [ECC ErorStatus Register SS 
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3.3.8 Indirect Access of External Bus Controller DCRs 

The following procedure accesses the EBC DCRs listed in Table 3-9. 

1. Write the offset from Table 3-10 to the Peripheral Controller Address Register (EBCO_CFGADDR). 
2. Read data from or write data to the Peripheral Controller Data Register (EBCO_CFGDATA). 


Table 3-9. External Bus Controller DCR Usage 


DCR 
Register Number Description 


EBCO_CFGADDR 0x012 Peripheral Controller Address Register 
. | EBCO_CFGDATA | = 0x01. {| RW Peripheral Controller Data Register 


Table 3-10. Offsets for External Bus Controller Registers 


[resister Oftset__ [Access _____Deseriptfon 
ESCOBOCR | 0x00 [AW _____| Penpheral Bank 0 Configuration Register 


RW 
ra 
ESCOLBESRT | __0x02 [RW | Peripheral Bus Eror Status Register? 
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3.3.9 Indirect Access of Decompression Controller DCRs 
The following procedure accesses the decompression controller DCRs listed in Table 3-11. 


1. Write the offset from Table 3-12 to the Decompression Controller Address Register 
(DCPO_CFGADDR). 


2. Read data from or write data to the Decompression Controller Data Register (DCPO_CFGDATA). 


Table 3-11. Decompression Controller DCR Usage 


DCR 
Register Number Description 


DCPO_CFGADDR 0x014 Decompression Controller Address Register 
DCP0_CFGDATA 0x015 Decompression Controller Data Register 


Table 3-12. Offsets for Decompression Controller Registers 


[Register Ost AW SSSSS~«Cesrpion 
| 
DCPO_CFG 
oCPoID——~| ora [AR | Decompression GontrolerID Register| 


DCPO_VER 0x42 Decompression Controller Version Number 
Register 


DCP0O_PLBBEAR | Ox50 Bus Error Address Register (PLB address) 


DCPO_MEMBEAR 0x51 Bus Error Address Register (DCP to EBC 
address) 


DCP0O_ESR Bus Error Status Register 0 (masters 0-3) 


DCP0O_RAMO— 0x400-0x7FF | R/W Decode Tables 
DCPO_RAM3FF 
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3.3.10 Memory-Mapped Input/Output Registers 


Some registers associated with on-chip peripherals are memory-mapped input/output (MMIO) 
registers. Such registers are mapped into the system memory space and are accessed using 
load/store instructions. 


3.3.10.1 Directly Accessed MMIO Registers 


Directly-accessed MMIO registers are accessed using load/store instructions that contain the register 
addresses. Table 3-13 lists the directly-accessed MMIO registers. 


Table 3-13. Directly Accessed MMIO Registers 


[Register| Aacress [Access [Description 
MMIO Registers Used for Indirect Access 


PCI-to-PLB Bridge 
Serial Ports 
0xEF600300 Es UART 0 Receiver Buffer Register 
Note: Set UARTO_LCR[DLAB] = 0 to access. 
UART 0 Transmitter Holding Register 
Note: Set UARTO_LCR[DLAB] = 0 to access. 
UART 0 Baud-rate Divisor Latch LSB 
Note: Set UARTO_LCR[DLAB] = 1 to access. 
OxEF600301 es UART 0 Interrupt Enable Register 
Note: Set UARTO_LCR[DLAB] = 0 to access. 
=—| fw — UART 0 Baud-rate Divisor Latch MSB 
Note: Set UARTO_LCR[DLAB] = 1 to access. 


R/W 
R/W 
UARTO_IIR OxEF600302. |R ===~—_—_—=Y| UART O Interrupt Identification Register 
UARTO_FCR OxEF600302 UART 0 FIFO Control Register 
UARTO_LCR OxEF600303 UART 0 Line Control Register 
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Table 3-13. Directly Accessed MMIO Registers (continued) 


[Reiter [Aarons Resess[eipfin 
UARTO_MCR OxEF600304 UART 0 Modem Control Register 


UARTO_LSR OxEF600305 UART 0 Line Status Register 

UARTO_MSR OxEF600306 UART 0 Modem Status Register 
UARTO_SCR OxEF600307 UART 0 Scratch Register 

UART1_RBR OxEF600400 UART 1 Receiver Buffer Register 

Note: Set UART1_LCR[DLAB] = 0 to access. 
UART 1 Transmitter Holding Register 

Note: Set UART1_LCR[DLAB] = 0 to access. 
UART 1 Baud-rate Divisor Latch LSB ; 
Note: Set UART1_LCR[DLAB] = 1 to access. 
UART 1 Interrupt Enable Register 

Note: Set UART1_LCR[DLAB] = 0 to access. 
UART 1 Baud-rate Divisor Latch MSB 

Note: Set UART1_LCR[DLAB] = 1 to access. 


aD 
2 


wv 


az 
3 


UART1_THR 


UART1_DLL 


UART1_IER OxEF600401 


UART1_DLM 


VARTA CrEFEOOHDD 
UARTI_FOR oxEF600402 
OxEFG00408 
OxEFGO0404 


UART1_LSR OxEF600405 UART 1 Line Status Register 
UART1_MSR OxEF600406 {R/V —_+| UART 1 Modem Status Register 
UART1_SCR OxEF600407 UART 1 Scratch Register 


3 


Inter-Integrated Circuit 

ICO Slave Data Buffer 

TCO Low Master Address 

NGO High Master Address 

NGO Conia 

NGO Mode Contral 

NGO Status 

NCO Extended Status 

TCO Low Slave Address 

NGO High Slave Adress 

NGO Clock Divide 

R/W IICO Interrupt Mask 
ICO_XFRCNT IICO Transfer Count 


ICO Extended Control and Slave Status 
ICO Direct Control 


a3) 


3| 3 


ICO_XTCNTLSS 
ICO_DIRECTCNTL 
OPB Arbiter 
OxEF600600 
OxEF600601 


PB Arbiter Priority Register 
PB Arbiter Control Register 


) 
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Table 3-13. Directly Accessed MMIO Registers (continued) 


[ResisterAdaress [Access [ «(Description 
GPIOO_OR RW 
GPIO0_TCR 
GPIO0_ODF 
GPIOO_IR oxEFeOO7IC_[R | GPIOOIROInput Register 
Pe ce ee eg ee el 
EWACO_MRO____[oxEF600800 [RW [ModeRegsierOSSCSC*S 
ENACO_N 
ENACO_TMRO 
ENACO_TMR 


RW 
[Rw 
Rw 
EMACO_RMR foxeFe00810 [RW [Receive Mode Register| 
EMAGO_ISR foxereoos14 [RW | 
EMACO_ISER foxereooeTs [RW 
EMACO_IAHR — }OxEF60081C [RW Individual Address High 
RW 
[RW 
RW 
RW 
[aw 
[aw 


Interrupt Status Register 
Interrupt Status Enable Register 


EMACO_IALR OxEF600820 Individual Address Low 


R/W 
R/W 
R/W 
R/W 
R/W 
R/W 
R/W 
R/W 
R/W 
EMACO_VTPID mW 
EMACO_VTO rw 
EMACO_PTR raw 
EMACO_IART RW 
R/W 
R/W 
R/W 
R 


EMACO_IAHT2 
EMACO_IAHT3 |OxEF600838 |R/W Individual Address Hash Table 3 

EMACO_IAHT | OxEF60083C_|RIW | individual Address Hash Table 
EMACO_GAHTI 
EMACO_GAHT? 7 
EMACO_GAHTS 
EMAGO_GAHT4 
EMACO_LSAH [OxEF600850 [R_——[LastSource AddressLow 
EMACOLSAL | OxER600854 |R [Last Source AddressHigh 
EMACO_IPGVR 
EMACO_STACR 
EMAGO_TRTR RN 


EMACO_RWMR OxEF600864 | R/W Receive Low/High Water Mark Register 
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3.3.10.2 Indirectly Accessed MMIO Registers 
The PCI configuration registers, listed in Table 3-15, are indirectly accessed. 


The following procedure accesses the PCI configuration registers, using the address and data 
registers listed in Table 3-14: : 


1. OR the Enable, Bus, Device, and Function fields of the PCI Configuration Address Register 
(PCICO_CFGADDR) with the high-order 6 bits of the offset from Table 3-15 and write the result to 
the PCICO_CFGADDR. 


2. OR the low-order 2 bits of the offset from Table 3-15 with the address of the PCI Configuration Data 
Register (PCICO_CFGDATA) to form an address. 


3. Read data from or write data to the address. 


Table 3-14. PCl Configuration Address and Data Registers 


[Register| Address _[ Access_[ ____Descripfion ———~d 


PCICO_CFGADDR O0xEECO0000 PCI Configuration Address Register 
PCICO_CFGDATA OxEEC00004 PCI Configuration Data Register 


Table 3-15. PCI Configuration Registers 


[POICE-VENDID__[ oxOI-x0O [AW _[R__[PCIVendoriD SSCS 
[PCICO_DEVID | Ox0s-0x02 [RW _[R__| PCI Device 1D 


fPorce_cts ___[oB-Or0e [RW [A___|PCIClass Register ——SSSSCSCSC~C~* 
[PCICO_CAGHELS_[Ox0C__[R [A _|PCICacheline SoC 
[PCICO_ROTYPE [OWE [RA [R [PCIHeader ype 
POCoaIST [OOF __[R__[R_|PCIBultinSelTestConol 
PPCICo_BARO___[oxtg-oxto [A___[R__[PCIResenedBARO 
nw 
OxF-OriC| — | — [POIResened BARS 
Or2S-xB0 | — [— [POIResened BARS 
[PCICO_BARS____[Ox@-027 | — | — [PCIResenedBARS CS 
Poice_csPTA ___[o@e-08 | — | — [Unused Carebus CS Powter 
[PCICO_SBSYSVIO__[Ox@D-O@C [RW [R__[PCISubsystemVendorD 
[PCICO_SBSYSID__[OF=O@E [RW [R_[PCISubsystemID 
[PCICO_EROMBA _[0xG5-0x0 [| — | — [Unused Expansion ROW Base Address | 
pPCICoCAP [oad A [R | PCICapabites omer 
PCICOINTPN_[O@D_[R_[R__[PClineruptPin 
[PCICO_MINGNT [ose [RA [R[PCIMinimum Grant 
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Table 3-15..PCl Configuration Registers (continued) 


| neier | one 


[POICE_MAKCINGY _[OGF___[R__[R | PO MaxmumLatency————~d 
PPCICeCAPID__—‘[oxss_—«[R 
| 
aa 


PCICO_NEXTIPTR 0x5 
PCICO_PMC 0Ox5B-0x5A Power Management Capabilities 


io 
R___[NedtemPonter CS 
ia 
rw _ 


AW [RW 
[PCICO_PMCSRESE [0x5 __[R___[R___| PNCSRPCIto POI bridge Suppor Extensions _ 
fPico_pATA «(SF | — | — |Unsedbaa SSCS 


PCICO_PMSCRR 0x64 R Power Management State Change Request 
Register 


3.4 Data Types and Alignment 


The data types consist of bytes (eight bits), halfwords (two bytes), words (four bytes), and strings (1 to 
128 bytes). Figure 3-10 shows the byte, halfword, and word data types and their bit and byte 
definitions for big endian representations of values. Note that PowerPC bit numbering is reversed 
from industry conventions; bit 0 represents the most significant bit of a value. 


Bit 0 31 
a] at 
0 


15 


Figure 3-10. PPC405GP Data Types 


Data is represented in either twos-complement notation or in an unsigned integer format; data 
representation is independent of alignment issues. | 


The address of an a data object is always the lowest address of any byte comprising the object. 


All instructions are words, and are word-aligned (the lowest byte address is divisible by 4). 
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3.4.1. Alignment for Storage Reference and Cache Control Instructions 


The storage reference instructions (loads and stores; see Table 3-23, “Storage Reference 
Instructions,” on page 3-48) move data to and from storage. The data cache control instructions listed 
in Table 3-32, “Cache Management Instructions,” on page 3-52, control the contents and operation of 
the data cache unit (DCU). Both types of instructions form an effective address (EA). The method of 
calculating the EA for the storage reference and cache control instructions is detailed in the 
description of those instructions. See Chapter 24, “Instruction Set,” for more information. 


Cache control instructions ignore the four least significant bits of the EA; no alignment restrictions 
exist in the DCU because of EAs. However, storage control attributes can cause alignment 
exceptions. When data address translation is disabled and a dcebz instruction references a storage 
region that is non-cachable, or for which write-through caching is the write strategy, an alignment 
exception is taken. Such exceptions result from the storage contro! attributes, not from EA alignment. 
The alignment exception enables system software to emulate the write-through function. 


Alignment requirements for the storage reference instructions and the dcread instruction depend on 
the particular instruction. Table 3-16, “Alignment Exception Summary,’ on page 3-28, summarizes the 
instructions that cause alignment exceptions. 


The data targets of instructions are of types that depend upon the instruction. The load/store 
instructions have the following “natural” alignments: 


e Load/store word instructions have word targets, word-aligned. 
¢ Load/ store halfword instructions have halfword targets, halfword-aligned. 
¢ Load/store byte instructions have byte targets, byte-aligned (that is, any alignment). 


Misalignments are addresses that are not naturally aligned on data type boundaries. An address not 
divisible by four is misaligned with respect to word instructions. An address not divisible by two is 
misaligned with respect to halfword instructions. The PPC405GP implementation handles 
misalignments within and across word boundaries, but there is a performance penalty because 
additional bus cycles are required. 


3.4.2 Alignment and Endian Operation 


The endian storage control attribute does not affect alignment behavior. In little endian storage 
regions, the alignment of data is treated as it is in big endian storage regions; no special alignment 
exceptions occur when accessing data in little endian storage regions. Note that the alignment 
exceptions that apply to big endian region accesses also apply to little endian storage region 
accesses. 
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3.4.3. Summary of Instructions Causing Alignment Exceptions 


Table 3-16 summarizes the instructions that cause alignment exceptions and the conditions under 
which the alignment exceptions occur. 


Table 3-16. Alignment Exception Summary 


Instructions Causing Alignment 
Exceptions 


fdebz EA in non-cachable or write-through storage 
dcread, Ilwarx, stwex. EA not word-aligned 


3.5 Byte Ordering 


The following discussion describes the “endianness” of the PPC405GP core, which, by default and in 
normal use is “big endian.” The PPC405GP also contains “little endian” peripherals and supports the 
attachment of external little endian peripherals. 


lf scalars (individual data items and instructions) were indivisible, “byte ordering” would not be a 
concern. It is meaningless to consider the order of bits or groups of bits within a byte, the smallest 
addressable unit of storage; nothing can be observed about such order. Only when scalars, which the 
programmer and processor regard as indivisible quantities, can comprise more than one addressable 
unit of storage does the question of byte order arise. 


For a machine in which the smallest addressable unit of storage is the 32-bit word, there is no 
question of the ordering of bytes within words. All transfers of individual scalars between registers and 
storage are of words, and the address of the byte containing the high-order eight bits of a scalar is the 
same as the address of any other byte of the scalar. 


For the PowerPC Architecture, as for most computer architectures currently implemented, the 
smallest addressable unit of storage is the 8-bit byte. Other scalars are halfwords, words, or 
doublewords, which consist of groups of bytes. When a word-length scalar is moved from a register to 
Storage, the scalar is stored in four consecutive byte addresses. It thus becomes meaningful to 
discuss the order of the byte addresses with respect to the value of the scalar: that is, which byte 
contains the highest-order eight bits of the scalar, which byte contains the next-highest-order eight 
bits, and so on. 


Given a scalar that contains multiple bytes, the choice of byte ordering is essentially arbitrary. There 
are 4! = 24 ways to specify the ordering of four bytes within a word, but only two of these orderings 
are commonly used: 


¢ The ordering that assigns the lowest address to the highest-order (“leftmost”) eight bits of the 
scalar, the next sequential address to the next-highest-order eight bits, and so on. 


This ordering is called big endian because the “big end” of the scalar, considered as a binary 
number, comes first in storage. 


¢ The ordering that assigns the lowest address to the lowest-order (“rightmost”) eight bits of the 
scalar, the next sequential address to the next-lowest-order eight bits, and so on. 


This ordering is called /ittle endian because the “little end” of the scalar, considered as a binary 
number, comes first in storage. 
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3.5.1 Structure Mapping Examples 


The following C language structure, s, contains an assortment of scalars and a character string. The 
comments show the value assumed to be in each structure element; these values show how the 
bytes comprising each structure element are mapped into storage. 


struct { 
int a; /* 0x1112_1314 word */ 
longlongb; /* 0x2122_ 2324 2526_2728 doubleword */ 
char “*c; /* 0x3132_3334 word */ 
char d[7]; /*'A','B''C','D','E','F','G' array of bytes */ 
short e; /* 0x5152 halfword */ 
int f; /* 0x6162_6364 word */ 

}s; 


C structure mapping rules permit the use of padding (skipped bytes) to align scalars on desirable 
boundaries. The structure mapping examples show each scalar aligned at its natural boundary. This 
alignment introduces padding of four bytes between a and b, one byte between d and e, and two 
bytes between e and f The same amount of padding is present in both big endian and little endian 
mappings. 


3.5.1.1. Big Endian Mapping 


The big endian mapping of structure s follows. (The data is highlighted in the structure mappings. 
Addresses, in hexadecimal, are below the data stored at the address. The contents of each byte, as 
defined in structure s, is shown as a (hexadecimal) number or character (for the string elements). 


11 | 12 [ 13 | 14 | 
21 | 22 | 23 | 24 

32 | 33 | 34 

'F |G 51 | 52 
61 | 62 | 63 | 64 |: 
BESESSSE 
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3.5.1.2 Little Endian Mapping 


Structure sis shown mapped little endian. 


14] 13 11 
orn | [ot || | |e |r 
“28 | 27 | 26 | 25 | 24 
01 | tos oc] ot || oe 
Al 
F |G 52 | 51 
64 | 63 | 62 | 61 


3.5.2 Support for Little Endian Byte Ordering 


PELE 


Except as noted, this book describes the processor as if it operated only in a big endian fashion. In 
fact, the IBM PowerPC Embedded Environment also supports little endian operation. 


‘The PowerPC little endian mode, defined in the PowerPC Architecture, is not implemented. 


3.5.3 Endian (E) Storage Attribute 


The endian (E) storage attribute supports direct connection of the PPC405GP to little endian 
peripherals and to memory containing little endian instructions and data. For every storage reference 
(instruction fetch or load/store access), an E storage attribute is associated with the storage region of 
the reference. The E attribute specifies whether that region is organized as big endian (E = 0) or little 
endian (E = 1). 


When address translation is enabled (MSRI[IR] = 1 or MSR[DR) = 1), the E field in the corresponding 
TLB entry controls the endianness of a memory region. When address translation is disabled 
(MSR[IR] = 0 or MSR[DR] = 0), the SLER controls the endianness of a memory region. 


Bytes in storage that are accessed as little endian are arranged in true little endian format. The 
PPC405GP does not support the little endian mode defined in the PowerPC architecture and used in 
PPC401xx and PPC403xx processors. Furthermore, no address modification is performed when 
accessing storage regions programmed as little endian. Instead, the PPC405GP reorders the bytes 
as they are transferred between the processor and memory. 


The on-the-fly reversal of bytes in little endian storage regions is handled in one of two ways, 
depending on whether the storage access is an instruction fetch or a data access (load/store). The 
following sections describe byte reordering for the two kinds of storage accesses. 


3-30 PPC405GP User’s Manual Preliminary 


3.5.3.1. Fetching Instructions from Little Endian Storage Regions 


Instructions are words (four bytes) that are aligned on word boundaries in memory. As such, 
instructions in a big endian memory region are arranged with the most significant byte (MSB) of the 
instruction word at the lowest address. 


Consider the big endian mapping of instruction p at address 00, where, for example, 
p= add 7, t7, r4: 


LS al ee 


0x01 | 0x02 | 0x03 


On the other hand, in the little endian mapping instruction p is arranged with the least significant byte 
_ (LSB) of the instruction word at the lowest numbered address: 


When an instruction is fetched from memory, the instruction must be placed in the instruction queue in 
the proper order. The execution unit assumes that the MSB of an instruction word is at the lowest 
address. Therefore, when instructions are fetched from little endian storage regions, the four bytes of 
an instruction word are reversed before the instruction is decoded. In the PPC405GP, the byte 
reversal occurs between memory and the instruction cache unit (ICU). The ICU always stores 
instructions in big endian format, regardless of whether the memory region containing the instruction 
is programmed as big endian or little endian. Thus, the bytes are already in the proper order when an 
instruction is transferred from the ICU to the decode stage of the pipeline. 


If a storage region is reprogrammed from one endian format to the other, the storage region must be 
reloaded with program and data structures in the appropriate endian format. If the endian format of 
instruction memory changes, the ICU must be made coherent with the updates. The ICU must be 
invalidated and the updated instruction memory using the new endian format must be fetched so that 
the proper byte ordering occurs before the new instructions are placed in the ICU. 


3.5.3.2 Accessing Data in Little Endian Storage Regions 


Unlike instruction fetches from little endian storage regions, data accesses from little endian storage 
regions are not byte-reversed between memory and the DCU. Data byte ordering, in memory, 
depends on the data type (byte, halfword, or word) of a specific data item. It is only when moving a 
data item of a specific type from or to a GPR that it becomes known what type of byte reversal is 
required. Therefore, byte reversal during load/store accesses is performed between the DCU and the 
GPR. 


When accessing data in a little endian storage region: 

e For byte loads/stores, no reordering occurs. 

¢ For halfword loads/stores, bytes are reversed within the halfword. 
e For word loads/stores, bytes are reversed within the word. 


Note that this applies, regardless of data alignment. 
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The big endian and little endian mappings of the structure s, shown in “Structure Mapping Examples” 
on page 3-29, demonstrate how the size of an item determines its byte ordering. For example: 


e¢ The word a has its four bytes reversed within the word spanning addresses 0x00-0x03. 


¢ The halfword e has its two bytes reversed within the halfword spanning addresses 0x1C—0x1D. 


Note that the array of bytes d, where each data item is a byte, is not reversed when the big endian and | 
little endian mappings are compared. For example, the character 'A' is located at address 14 in both 
the big endian and little endian mappings. 


In little endian storage regions, the alignment of data is treated as it is in big endian storage regions. 
Unlike PowerPC little endian mode, no special alignment exceptions occur when accessing data in 
little endian storage regions. 


3.5.3.3 PowerPC Byte-Reverse Instructions 


For big endian storage regions, normal load/store instructions move the more significant bytes of a 
register to and from the lower-numbered memory addresses. The !Joad/store with byte-reverse 
instructions move the more significant bytes of the register to and from the higher numbered memory 
addresses. 


As Figure 3-11 through Figure 3-74 illustrate, a normal store to a big endian storage region is the 
same as a byte-reverse store to a little endian storage region. Conversely, a normal store to a little 
endian storage region is the same as a byte-reverse store to a big endian storage region. 


Figure 3-11 illustrates the contents of a GPR and memory (starting at address 00) after a normal 
load/store in a big endian storage region. 


MSB LSB 
4 


12 1 Memory 
0x01 0x03 


Figure 3-11. Normal Word Load or Store (Big Endian Storage Region) 


Note that the results are identical to the results of a load/store with byte-reverse in a little endian 
storage region, as illustrated in Figure 3-12. 


MSB LSB 


11 12 13 14 Memory 
0x00 0x01 0x02 0x03 


Figure 3-12. Byte-Reverse Word Load or Store (Little Endian Storage Region) 
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Figure 3-13 illustrates the contents of a GPR and memory (starting at address 00) after a load/store 
with byte-reverse in a big endian storage region. 


14 13 12 11 Memory 
0x00 0x01 ox02 0x03 


Figure 3-13. Byte-Reverse Word Load or Store (Big Endian Storage Region) 


Note that the results are identical to the results of a normal load/store in a little endian storage region, 
as illustrated in Figure 3-14. 


14 13 12 11 Memory 
0x00 : 0x01 0x02 0x03 


Figure 3-14. Normal Word Load or Store (Little Endian Storage Region) 


The E storage attribute augments the byte-reverse load/store instructions in two important ways: 


¢ The load/store with byte-reverse instructions do not solve the problem of fetching instructions from 
a storage region in little endian format. 


Only the endian storage attribute mechanism supports the fetching of little endian program images. 


* Typical compilers cannot make general use of the byte-reverse load/store instructions, so these 
instructions are ordinarily used only in device drivers written in hand-coded assembler. 


Compilers can, however, take full advantage of the endian storage attribute mechanism, enabling 
application programmers working in a high-level language, such as C, to compile programs and 
data structures into little endian format. 


3.6 Instruction Processing 


The instruction pipeline, illustrated in Figure 3-15, contains three queue locations: prefetch buffer 1 
(PFB1), prefetch buffer 0 (PFBO), and decode (DCD). This queue implements a pipeline with the 
following functional stages: fetch, decode, execute, write-back and load write-back. Instructions are 
fetched from the instruction cache unit (ICU), placed in the instruction queue, and eventually 
dispatched to the execution unit (EXU). 


Instructions are fetched from the ICU at the request of the EXU. Cachable instructions are forwarded 
directly to the instruction queue and stored in the ICU cache array. Non-cachable instructions are also 
forwarded directly to the instruction queue, but are not stored in the ICU cache array. Fetched 
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instructions drop to the empty queue location closest to the EXU. When there is room in the queue, 
Instructions can be returned from the ICU two at a time. If the queue is empty and the ICU is returning 
two instructions, one instruction drops into DCD while the other drops into PFBO. PFB1 buffers 
instructions when the pipeline stalls. 


Branch instructions are examined in DCD and PFBO while all other instructions are decoded in DCD. 
All instructions must pass through DCD before entering the EXU. The EXU contains the execute, 
write-back and load write-back stages of the pipe. The results of most instructions are calculated 
during the execute stage and written to the GPR file during the write back stage. Load instructions 
write the GPR file during the load write-back stage. 


Fetch 


Instruction 
Queue 


Dispatch 


Figure 3-15. PPC405GP Instruction Pipeline 


3.7 Branch Processing 


The PPC405GP, which provides a variety of conditional and unconditional branching instructions, 
uses the branch prediction techniques described in “Branch Prediction” on page 3-35. 


3.7.1. Unconditional Branch Target Addressing Options 


The unconditional branches (b, ba, bl, bla) carry the displacement to the branch target address asa 
signed 26-bit value (the 24-bit LI field right-extended with 0b00). The displacement enables 
unconditional branches to cover an address range of +32MB. 


For the relative (AA = 0) forms (b, bl), the target address is the current instruction address (CIA, the 
address of the branch instruction) plus the signed displacement. 


For the absolute (AA = 1) forms (ba, bla), the target address is 0 plus the signed displacement. If the — 
sign bit (LI[0}) is 0, the displacement is the target address. If the sign bit is 1, the displacement is a 
negative value and wraps to the highest memory addresses. For example, if the displacement is 
Ox3FF FFFC (the 26-bit representation of —4), the target address is OXxFFFF FFFC (0 — 4B, or 4 bytes 
below the top of memory). 
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3.7.2 Conditional Branch Target Addressing Options 


The conditional branches (be, bea, bcl, bcla) carry the displacement to the branch target address as 
a signed 16-bit value (the 14-bit BD field right-extended with Ob00). The displacement enables 
conditional branches to cover an address range of +32KB. 


For the relative (AA = 0) forms (be, bel), the target address is the CIA plus the signed displacement. 


For the absolute (AA = 1) forms (bea, bela), the target address is O plus the signed displacement. If 
the sign bit (BD[0}) is 0, the displacement is the target address. If the sign bit is 1, the displacement is 
negative and wraps to the highest memory addresses. For example, if the displacement is OxFFFC 
(the 16-bit representation of —4), the target address is OxFFFF FFFC (0 — 4B, or 4 bytes from the top 
of memory). 


3.7.3 Conditional Branch Condition Register Testing 


Conditional branch instructions can test a CR bit. The value of the BI field specifies the bit to be tested 
(bit 0-31). The BO field controls whether the CR bit is tested, as described in the following section. 


3.7.4 BO Field on Conditional Branches 


The BO field of the conditional branch instruction specifies the conditions used to control branching, 
and specifies how the branch affects the CTR. 


Conditional branch instructions can test one bit in the CR. This option is selected when BO[O] = 0; if 
BO[0] = 1, the CR does not participate in the branch condition test. If this option is selected, the 
condition is satisfied (branch can occur) if CR[BI] = BO[1]. 


Conditional branch instructions can decrement the CTR by one, and after the decrement, test the 
CTR value. This option is selected when BO[2] = 0. If this option is selected, BO[3] specifies the 
condition that must be satisfied to allow a branch to be taken. If BO[3] = 0, CTR # 0 is required for a 
branch to occur. If BO[3] = 1, CTR = 0 is required for a branch to occur. 


lf BO[2] = 1, the contents of the CTR are left unchanged, and the CTR does not participate in the 
branch condition test. 


Table 3-17 summarizes the usage of the bits of the BO field. BO[4] is further discussed in “Branch 
Prediction.” 


Table 3-17. Bits of the BO Field 
BO Bit Description 


BO[0] CR Test Control 
0 Test CR bit specified by BI field for value specified by BO[1] 
1 Do not test CR 


BO[1] CR Test Value 
0 Test for CR[BI] = 0. 
1 Test for CR{BI] = 1. 


BO[2] CTR Test Control 
0 Decrement CTR by one and test whether CTR satisfies the 
condition specified by BO[3]. 
1 Do not change CTR, do not test CTR. 
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Table 3-17. Bits of the BO Field (continued) 


BO Bit Description 


BO[3] CTR Test Value 
O Test for CTR #0. 


1 Test for CTR = 0. 


BO[4] Branch Prediction Reversal 
0 Apply standard branch prediction. 
1 Reverse the standard branch prediction. 


Table 3-18 lists specific BO field contents, and the resulting actions; z represents a mandatory value 
of 0, and yis a branch prediction option discussed in “Branch Prediction.” 


Table 3-18. Conditional Branch BO Field 


BO Value ’ Description 


oo00y Decrement the CTR, then branch if the decremented CTR # 0 and CR[BI]=0. 
Decrement the CTR, then branch if the decremented CTR = 0 and CR[BI] = 0. 

O01zy Branch if CR[B!] = 0. 

0100y Decrement the CTR, then branch if the decremented CTR # 0 and CRI[BI] = 1. 


0101y Decrement the CTR, then branch if the decremented CTR=0 and CR{[BI] = 1. 


O11zy Branch if CR[BI] = 1. 
1Z00y Decrement the CTR, then branch if the decremented CTR =« 0. 


1z01y Decrement the CTR, then branch if the decremented CTR = 0. 
Branch always. 


3.7.5 Branch Prediction 


Conditional branches present a problem to the instruction fetcher. A branch might be taken. The 
branch EXU attempts to predict whether or not a branch is taken before all information necessary to 
determine the branch direction is available. This decision is called a branch prediction. The fetcher 
can then prefetch instructions starting at the predicted branch target address. If the prediction is 
correct, time is saved because the branched-to instruction is available in the instruction queue. 
Otherwise, the instruction pipeline stalls while the correct instruction is fetched into the instruction 
queue. To be effective, branch prediction must be correct most of the time. 


The PowerPC Architecture enables software to reverse the default branch prediction, which is defined 
as follows: 


Predict that the branch is to be taken if ((BO[0] , BO[2]) v s) = 1 


where sis the sign bit of the displacement for conditional branch (be) instructions, and 0 for belr and 
bectr instructions. 


(BO[0] , BO[2]) = 1 only when the conditional branch tests nothing (the “branch always” condition). 
Obviously, the branch should be predicted taken for this case. 


If the branch tests anything, (BO[0] ~ BO[2]) = 0, and s entirely controls the prediction. The default 
prediction for this case was decided by considering the relative form of be, which is commonly used at 
the end of loops to control the number of times that a loop is executed. The branch is taken every time 
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the loop is executed except the last, so it is best if the branch is predicted taken. The pranen target is 
the beginning of the loop, so the branch displacement is negative and s = 1. 


If branch displacements are positive (s = 0), the branch is predicted not taken. If the branch 
instruction is any form of belr or bectr except the “branch always” forms, then s = 0, and the branch is 
predicted not taken. 


There is a peculiar consequence of this prediction algorithm for the absolute forms of be (bca and 
bela). As described in “Unconditional Branch Target Addressing Options” on page 3-34, if the 
algebraic sign of the displacement is negative (s = 1), the branch target address is in high memory. If 
the algebraic sign of the displacement is positive (s = 0), the branch target address is in low memory. 
Because these are absolute-addressing forms, there is no reason to treat high and low memory 
differently. Nevertheless, for the high memory case the default prediction is taken, and for the low 
memory case the default prediction is not taken. 


BO[4] is the prediction reversal bit. lf BO[4] = 0, the default prediction is applied. If BO[4] = 1, the 
reverse of the standard prediction is applied. For the cases in Table 3-17 where BO[4] = y, software 
can reverse the default prediction. This should only be done when the default prediction is likely to be 
wrong. Note that for the “branch always” condition, reversal of the default prediction is not allowed. 


The PowerPC Architecture requires assemblers to provide a way to conveniently control branch 
prediction. For any conditional branch mnemonic, a suffix may be added to the mnemonic to control 
prediction, as follows: 


+ Predict branch to be taken 
— Predict branch to be not taken 


For example, bectr+ causes BO[4] to be set appropriately to force the branch to be predicted taken. 


3.8 Speculative Accesses 


The PowerPC Architecture permits implementations to perform speculative accesses to memory, 
either for instruction fetching, or for data loads. A speculative access is defined as any access which 
is not required by a sequential execution model. 


For example, prefetching instructions beyond an undetermined conditional branch is a speculative 
fetch; if the branch is not in the predicted direction, the program, as executed, never needs the 
instructions from the predicted path. 


Sometimes speculative accesses are inappropriate. For example, attempting to fetch instructions 
from addresses that cannot contain instructions can cause problems. To protect against errant 
accesses to “sensitive” memory or I/O devices, the PowerPC Architecture provides the G (guarded) 
storage attribute, which can be used to specify memory pages from which speculative accesses are 
prohibited. (Actually, speculative accesses to guarded storage are allowed in certain limited 
circumstances; if an instruction in a cache block will be executed, the rest of the cache block can be 
speculatively accessed.) 


3.8.1. Speculative Accesses in the PPC405GP 
The PPC405GP does not perform speculative loads. 
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Two methods control speculative instruction fetching. If instruction address translation is enabled 
(MSRI[IR] = 1), the G (guarded) field in the translation lookaside buffer (TLB) entries controls 
speculative accesses. 


lf instruction address translation is disabled (MSR[IR] = 0), the Storage Guarded Register (SGR) 
controls speculative accesses for regions of memory. When a region is guarded (speculative fetching 
is disallowed), instruction prefetching is disabled for that region. A fetch request must be completely 
. resolved (no longer speculative) before it is issued. There is a considerable performance penalty for 
fetching from guarded storage, so guarding should be used only when required. 


Note that, following any reset, the PPC405GP operates with all of storage guarded. 


Note that when address translation is enabled, attempts to access guarded storage result in 
instruction storage exceptions. Guarded memory is in most often needed with peripheral status 
registers that are cleared automatically after being read, because an unintended access resulting 
from a speculative fetch would cause the loss of status information. Because the MMU provides 64 
pages with a wide range of page sizes as small as 1KB, fetching instructions from guarded storage 
should be unnecessary. 


3.8.1.1. Prefetch Distance Down an Unresolved Branch Path 


The fetcher will speculatively access up to five instructions down a predicted branch path, whether 
taken or sequential. The unresolved branch is in the DCD stage of the instruction queue (see 
“Instruction Processing” on page 3-33 for a description of the instruction pipeline). lf PFBO and PFB1 
are full, no further speculative accesses occur. If PFBO or PFB1 is empty, the fetcher requests the 
next speculative instruction from the ICU; that instruction is placed in PFBO or PFB1. If the fetched 
instruction is at the end of a cache line, and if PFB1 is empty, the fetcher requests the next cache line. 
The instruction at the beginning of the cache line is placed in PFB1. In this case, five instructions are 
speculatively accessed. The fetcher can speculatively access no more than four instructions (a cache 
line) from the cache with a single request, assuming the speculative address is cachable. 


If the address is non-cachable (as controlled by the | storage attribute), no more than two instructions 
are speculatively accessed. 


3.8.1.2 Prefetch of Branches to the CTR and Branches to the LR 


When the instruction fetcher predicts that a betr or blir instruction will be taken, the fetcher does not 
attempt to fetch an instruction from the target address in the CTR or LR if an executing instruction 
updates the register ahead of the branch. (See “Instruction Processing” on page 3-33 fora 
description of the instruction pipeline). The fetcher recognizes that the CTR or LR contains data left 
from an earlier use and that such data is probably not valid. 


In such cases, the fetcher does not fetch the instruction at the target address until the instruction that 
is updating the CTR or LR completes. Only then are the “correct” CTR or LR contents known. This 
prevents the fetcher from speculatively accessing a completely “random” address. After the CTR or 
LR contents are known to be correct, the fetcher accesses no more than five instructions down the 
sequential or taken path of an unresolved branch, or at the address contained in the CTR or LR. 


3.8.2 Preventing Inappropriate Speculative Accesses 


A memory-mapped I/O peripheral, such as a serial port having a status register that is automatically 
reset when read provides a simple example of storage that should not be speculatively accessed. If 
code is in memory at an address adjacent to the peripheral (for example, code goes from 
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0x0000 0000 to 0x0000 OFFF, and the peripheral is at Ox0000 1000), prefetching past the end of the 
code will read the peripheral. 


Guarding storage also prevents prefetching past the end of memory. If the highest memory address is 
left unguarded, the fetcher could attempt to fetch past the last valid address, potentially causing 
machine checks on the fetches from invalid addresses. While the machine checks do not actually 
cause an exception until the processor attempts to execute an instruction at an invalid address, some 
systems could suffer from the attempt to access such an invalid address. For example, an external 
memory controller might log an error. 


System designers can avoid problems from speculative fetching without using the guarded storage 
attributes. The rest of this section describes ways to prevent speculative instruction fetches to 
sensitive addresses in unguarded memory regions. 


3.8.2.1. Fetching Past an Interrupt-Causing or Interrupt-Returning Instruction 


Suppose a betr or blr instruction closely follows an interrupt-causing or interrupt-returning instruction 
(se, rfi, or rfci). The fetcher does not prevent speculatively fetching past one of these instructions. In 
other words, the fetcher does not treat the interrupt-causing and interrupt-returning instructions 
specially when deciding whether to predict down a branch path. Instructions after an rfi, for example, 
are considered to be on the determined branch path. 


To understand the implications of this situation, consider the code sequence: 


handler: aaa 
bbb 
rfi 

subroutine: bctr 


When executing the interrupt handler, the fetcher does not recognize the rfi as a break in the program 
flow, and speculatively fetches the target of the betr, which is really the first instruction of a subroutine 
that has not been called. Therefore, the CTR might contain an invalid pointer. 


To protect against such a prefetch, the software must insert an unconditional branch hang (b $) just 
after the rfi. This prevents the hardware from prefetching the invalid target address used by bctr. 


Consider also the above code sequence, with the rfi instruction replaced by an sc instruction used to 
initialize the CTR with the appropriate value for the betr to branch to, upon return from the system 
call. The sc handler returns to the instruction following the sc, which can’t be a branch hang. Instead, 
software could put a mtctr just before the sc to load a non-sensitive address into the CTR. This 
address will be used as the prediction address before the sce executes. An alternative would be to put 
a mfctr or mtctr between the se and the bcetr; the mtctr prevents the fetcher from speculatively 
accessing the address contained in the CTR before initialization. 


3.8.2.2 Fetching Past tw or twi Instructions 


The interrupt-causing instructions, tw and twi, do not require the special handling described in 
“Fetching Past an Interrupt-Causing or Interrupt-Returning Instruction” on page 3-39. These 
instructions are typically used by debuggers, which implement software breakpoints by substituting a 
trap instruction for the instruction originally at the breakpoint address. In a code sequence mtir 
followed by blr (or mtctr followed by betr), replacement of mtIr/mtctr by tw or twi leaves the LR/CTR 
uninitialized. It would be inappropriate to fetch from the blir/bctr target address. This situation is 
common, and the fetcher is designed to prevent the problem. 
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3.8.2.3 Fetching Past an Unconditional Branch 


When an unconditional branch is in DCD in the instruction queue, the fetcher recognizes that the 
sequential instructions following the branch are unnecessary. These sequential addresses are not 
accessed. Addresses at the branch target are accessed instead. 


Therefore, placing an unconditional branch just before the start of a sensitive address space (for 
example, at the “end” of a memory area that borders an I/O device) guarantees that addresses in the 
sensitive area will not be speculatively fetched. 


3.8.2.4 Suggested Locations of Memory-Mapped Hardware 


The preferred method of protecting memory-mapped hardware from inadvertent access is to use 
address translation, with hardware isolated to guarded pages (the G storage attribute in the 
associated TLB entry is set to 1.) The pages can be as small as 1KB. Code should never be stored in 
such pages. 


lf address translation is disabled, the preferred protection method is to isolate memory-mapped 
hardware into regions guarded using the SGR. Code should never be stored in such regions. The 
disadvantage of this method, compared to the preferred method, is that each region guarded by the 
SGR consumes 128MB of the address space. 


Table 3-19 shows two address regions of the PPC405GP. Suppose a system designer can map all 
I/O devices and all ROM and SRAM devices into any location in either region. The choices made by 
the designer can prevent speculative accesses to the memory-mapped I/O devices. 


Table 3-19. Example Memory Mapping 


0x7800 0000 — 0x7FFF FFFF (SGR bit 15) | 128MB Region 2 
0x7000 0000 — 0x77FF FFFF (SGR bit 14) | 128MB Region 1 


A simple way to avoid the problem of speculative reads to peripherals is to map all storage containing 
code into Region 2, and all /O devices into Region 1. Thus, accesses to Region 2 would only be for 
code and program data. Speculative fetches occuring in Region 2 would never access addresses in 
Region 1. Note that this hardware organization eliminates the need to use of the G storage attribute to 
protect Region 1. However, Region 1 could be set as guarded with no performance penalty, because 
there is no code to execute or variable data to access in Region 1. 


The use of these regions could be reversed (code in Region 1 and I/O devices in Region 2), if Region 
2 is set as guarded. Prefetching from the highest addresses of Region 1 could cause an attempt to 
speculatively access the bottom of Region 2, but guarding prevents this from occurring. The 
performance penalty is slight, under the assumption that code infrequently executes the instructions 
in the highest addresses of Region 1. 
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3.8.3 Summary 


Software should take the following actions to prevent speculative accesses to sensitive data areas, if 
the sensitive data areas are not in guarded storage: 


¢ Protect against accesses to “random” values in the LR or CTR on bir or betr branches following rfi, 
rfci, or sc instructions by putting appropriate instructions before or after the rfi, rfci, or sc 
instruction. See “Fetching Past an Interrupt-Causing or Interrupt-Returning Instruction” on 
page 3-39. 


¢ Protect against “running past’ the end of memory into a bordering I/O device by putting an 
unconditional branch at the end of the memory area. See “Fetching Past an Unconditional Branch” 
on page 3-40. 


¢ Recognize that a maximum of five words (20 bytes) can be prefetched past an unresolved 
conditional branch, either down the target path or the sequential path. See “Prefetch Distance 
Down an Unresolved Branch Path” on page 3-38. 


Of course, software should not code branches with known unsafe targets (either relative to the 
instruction counter, or to addresses contained in the LR or CTR), on the assumption that the targets 
are “protected” by code guaranteeing that the unsafe direction is not taken. The fetcher assumes that 
if a branch is predicted to be taken, it is safe to fetch down the target path. 


3.9 Privileged Mode Operation 


In the PowerPC Architecture, several terms describe two operating modes that have different 
instruction execution privileges. When a processor is in “privileged mode,” it can execute all 
instructions in the instruction set. This mode is also called the “supervisor state.” The other mode, in 
which certain instructions cannot be executed, is called the “user mode,” or “problem state.” These 
terms are used in pairs: 


Privileged Non-privileged 


Privileged Mode 
Problem Stale 


The architecture uses MSR[PR] to control the execution mode. When MSR[PR] = 1, the processor is 
in user mode (problem state); when MSR[PR] = 0, the processor is in privileged mode (supervisor 
state). . 


After a reset, MSR[PR] = 0. 


3.9.1 MSR Bits and Exception Handling 


The current value of MSR[PR] is saved, along with all other MSR bits, in the SRR1 (for non-critical 
interrupts) or SRR@ (for critical interrupts) upon any interrupt, and MSR[PR] is set to 0. Therefore, all 
exception handlers operate in privileged mode. 


Attempting to execute a privileged instruction while in user mode causes a privileged violation 
program exception (see “Program Interrupt” on page 10-40). The PPC405GP does not execute the 
instruction, and the least-significant 16 bits of the program counter are loaded with 0x0700, the 
address of an exception processing routine. 
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The PRR field of the Exception Syndrome Register (ESR) is set when an interrupt was caused by a 
privileged instruction program exception. Software is not required to clear ESR[PRR]. 


3.9.2 Privileged Instructions 


The instructions listed in Table 3-20 are privileged and cannot be executed while in user mode 
(MSR[PR] = 1). 


Table 3-20. Privileged Instructions 


3.9.3 Privileged SPRs 


All SPRs are privileged, except for the LR, the CTR, the XER, USPRGO, and read access to SPRG4— 
SPRG7. Reading from the time base registers Time Base Lower (TBL) and Time Base Upper (TBU) 
is not privileged. These registers are read using the mftb instruction, rather than the mfspr 
instruction. TBL and TBU are written (with different addresses) using mtspr, which is privileged for 
these registers. Except for moves to and from non-privileged SPRs, attempts to execute mfspr and 
mtspr instructions while in user mode result in privileged violation program exceptions. 
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In a mfspr or mtspr instruction, the 10-bit SPRN field specifies the SPR number of the source or 
destination SPR. The SPRN field contains two five-bit subfields, SPRNo.4 and SPRNz.9. The 
assembler handles the unusual register number encoding to generate the SPRF field. In the machine 
code for the mfspr and mtspr instructions, the SPRN subfields are reversed (ending up as SPRF 6.9 
and SPRF,.4) for compatibility with the POWER Architecture. 


In the PowerPC Architecture, SPR numbers having a 1 in the most-significant bit of the SPRF field are 
privileged. 


The following example illustrates how SPR numbers appear in assembler language coding and in 
machine coding of the mfspr and mtspr instructions. 


In assembler language coding, SRRO is SPR 26. Note that the assembler handles the unusual 
register number encoding to generate the SPRF field. 


mfspr r5,26 


When the SPR number is considered as a binary number (060000011010), the most-significant bit is 
0. However, the machine code for the instruction reverses the subfields, resulting in the following 
SPRF field: 0b1101000000. The most-significant bit is 1; SRRO is privileged. 


When an SPR number is considered as a hexadecimal number, the second digit of the three-digit 
hexadecimal number indicates whether an SPR is privileged. If the second digit is odd (1, 3, 5, 7, 9, B, 
D, F), the SPR is privileged. 


For example, the SPR number of SRRO is 26 (0x01A). The second hexadecimal digit is odd; SRRO is 
privileged. In contrast, the LR is SPR 8 iene the second hexadecimal digit is not odd; the LR is 
non-privileged. 


3.9.4 Privileged DCRs 


The mtder and mfder instructions themselves are privileged, in all cases. All DCRs are privileged. 


3.10 Synchronization 


The PPC405GP supports the synchronization operations of the PowerPC Architecture. The following 
book, chapter, and section numbers refer to related information in The PowerPC Architecture: A 
Specification for a New Family of RISC Processors: 

¢ Book Il, Section 1.8.1, “Storage Access Ordering” and “Enforce In-order Execution of I/O” 

¢ Book Ill, Section 1.7, “Synchronization” 

¢ Book Ill, Chapter 7, “Synchronization Requirements for Special Registers and Lookaside Buffers” 
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3.10.1 Context Synchronization 


The context of a program is the environment (for example, privilege and address translation) in which 
the program executes. Context is controlled by the content of certain registers, such as the Machine 
State Register (MSR), and includes the content of all GPRs and SPRs. 


An instruction or event is context synchronizing if it satisfies the following requirements: 


1. All instructions that precede a context synchronizing operation must complete in the context that 
existed before the context synchronizing operation. 


2. All instructions that follow a context synchronizing operation must complete in the context that 
exists after the context synchronizing operation. 


Such instructions and events are called “context synchronizing operations.” In the PPC405GP, these 
include any interrupt, except a non-recoverable instruction machine check, and the isyne, rfci, rfi, . 
and sc instructions. 


However, context specifically excludes the contents of memory. A context synchronizing operation 
does not guarantee that subsequent instructions observe the memory context established by 
previous instructions. To guarantee memory access ordering in the PPC405GP, one must use either 
an eieio instruction or a sync instruction. Note that for the PPC405GP, the eieio and sync 
instructions are implemented identically. See “Storage Synchronization” on page 3-46. 


The contents of DCRs are not considered as part of the processor “context” managed by a context 
synchronizing operation. DCRs are not part of the processor core, and are analogous to memory- 
mapped registers. Their context is managed in a manner similar to that of memory contents. 


Finally, implementations of the PowerPC Architecture can exempt the machine check exception from 
context synchronization control. If the machine check exception is exempted, an instruction that 
precedes a context synchronizing operation can cause a machine check exception after the context 
synchronizing operation occurs and additional instructions have completed. 


The following scenarios use pseudocode examples to illustrate these limitations of context . 
synchronization. Subsequent text explains how software can further guarantee “storage ordering.” 
1. Consider the following instruction sequence: 

STORE non-cachable to address XYZ 

isync 

XYZ instruction 


In this sequence, the isync instruction does not guarantee that the XYZ instruction is fetched after 
the STORE has occurred to memory. There is no guarantee which XYZ instruction will execute; 
either the old version or the new (stored) version might. 


2. Consider the following instruction sequence, which assumes that the PPC405GP uses DCRs to 
provide bus region control: 


STORE non-cachable to address XYZ 
isync 
MTDCR to change a bus region containing XYZ 


In this sequence, there is no guarantee that the STORE will occur before the mtder changing the 
bus region control DCR. The STORE could fail because of a configuration error. 
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Consider an interrupt that changes privileged mode. An interrupt is a context synchronizing operation, 
because interrupts cause the MSR to be updated. The MSR is part of the processor context; the 
context synchronizing operation guarantees that all instructions that precede the interrupt complete 
using the preinterrupt value of MSR[PR], and that all instructions that follow the interrupt complete 
using the postinterrupt value. 


Consider, on the other hand, some code that uses mtmsr to change the value of MSR[PR], which 
changes the privileged mode. In this case, the MSR is changed, changing the context. It is possible, 
for example, that prefetched privileged instructions expect to execute after the mtmsr has changed 
the operating mode from privileged mode to user mode. To prevent privileged instruction program 
exceptions, the code must execute a context synchronization operation, such as isync, immediately 
after the mtmsr instruction to prevent further instruction execution until the mtmsr completes. 


eieio or sync can ensure that the contents of memory and DCRs are synchronized in the instruction 
stream. These instructions guarantee storage ordering because all memory accesses that precede 
eieio or sync are completed before subsequent memory accesses. Neither eieio nor sync guarantee 
that instruction prefetching is delayed until the eieio or sync completes. The instructions do not cause 
the prefetch queues to be purged and instructions to be refetched. See “Storage Synchronization” on 
page 3-46 for more information. 


Instruction cache state is part of context. A context synchronization operation is required to guarantee 
instruction cache access ordering. 


3. Consider the following instruction sequence, which is required for creating self-modifying code: 


STORE Change data cache contents 


dcbst Flush the new data cache contents to memory 

sync Guarantee that dcbst completes before subsequent instructions begin 

icbi Context changing operation; invalidates instruction cache contents. 

isync Context synchronizing operation; causes refetch using new instruction cache context 


text and new memory context, due to the previous sync. 


If software wishes to ensure that all storage accesses are complete before executing a mtder to 
change a bus region (Example 2), the software must issue a sync after all storage accesses and 
before the mtdcr. Likewise, if the software is to ensure that all instruction fetches after the mtdcr use 
the new bank register contents, the software must issue an isync, after the mtdcer and before the first 
instruction that should be fetched in the new context. 


isyne guarantees that all subsequent instructions are fetched and executed using the context 
established by all previous instructions. isyne is a context synchronizing operation; isyne causes all 
subsequently prefetched instructions to be discarded and refetched. 


The following example illustrates the use of isyne with debug exceptions: 


mtdbcrO Enable an instruction address compare (IAC) event 

isync Wait for the new Debug Contro! Register 0 (DBCRO) context to be established 

XYZ This instruction is at the IAC address; an isyne was necessary to guarantee that the 
IAC event occurs at the execution of this instruction 
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3.10.2 Execution Synchronization 


For completeness, consider the definition of execution synchronizing as it relates to context 
synchronization. Execution synchronization is architecturally a subset of context synchronization. 


Execution synchronization guarantees that the following requirement is met: 


All instructions that precede an execution synchronizing operation must complete in the context 
that existed before the execution synchronizing operation. 


The following requirement need not be met: 


All instructions that follow an execution synchronizing operation must complete in the context that 
exists after the execution synchronizing operation. 


Execution synchronization ensures that preceding instructions execute in the old context; subsequent 
instructions might execute in either the new or old context (indeterminate). The PPC405GP provides 
three execution synchronizing operations: the eieio, mtmsr, and sync instructions. 


Because mtmsr is execution synchronizing, it guarantees that previous instructions complete using 
the old MSR value. (For example, using mtmsr to change the endian mode.) However, to guarantee 
that subsequent instructions use the new MSR value, we have to insert a context synchronization 
operation, such as isync. 


Note that the PowerPC Architecture requires MSR[EE] (the external interrupt bit) to be, in effect, 
execution synchronizing: if a mtmsr sets MSR[EE] = 1, and an external interrupt is pending, the 
exception must be taken before the instruction that follows mtmsr is executed. However, the mtmsr 
instruction is not a context synchronizing operation, so the PPC405GP does not, for example, discard 
prefetched instructions and refetch. Note that the wrtee and wrteei instructions can change the value 
of MSR[EE], but are not execution synchronizing. 


Finally, while syne and eieio are execution synchronizing, they are also more restrictive in their 
requirement of memory ordering. Stating that an operation is execution synchronizing does not imply 
storage ordering. This is an additional specific requirement of syne and eieio. 


3.10.3 Storage Synchronization 


The sync instruction guarantees that all previous storage references complete with respect to the 
PPC405GP before the sync instruction completes (therefore, before any subsequent instructions 
begin to execute). The syne instruction is execution synchronizing. 


Consider the following use of sync: 


stw Store to peripheral 
sync Wait for store to actually complete 
mtder Reconfigure device 
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The eieio instruction guarantees the order of storage accesses. All storage accesses that precede 
eieio complete before any storage accesses that follow the instruction, as in the following example: 


stb X Store to peripheral, address X; this resets a status bit in the device ~ 

eieio Guarantee stb X completes before next instruction 

Ibz Y Load from peripheral, address Y; this is the status register updated by stb X. 
eieio was necessary, because the read and write addresses are different, but 
affect each other 


The PPC405GP implements both sync and eieio identically, in the manner described above for sync. 
In the PowerPC Architecture, syne can function across all processors in a multiprocessor 
environment; eieio functions only within its executing processor. The PPC405GP does not provide 
hardware support for multiprocessor memory coherency, so sync does not guarantee memory 
ordering across multiple processors. 


3.11 Instruction Set 


The PPC405GP instruction set contains instructions defined in the PowerPC Architecture and 
instructions specific to the IBM PowerPC 400 family of embedded processors. 


Chapter 24, “Instruction Set,” contains detailed descriptions of each instruction. 


Appendix A, “Instruction Summary,’ alphabetically lists each instruction and extended mnemonic and 
provides a short-form description. Appendix B, “Instructions by Category,” provides short-form 
descriptions of instructions, grouped by the instruction categories listed in Table 3-21, “PPC405GP 
Instruction Set Summary,’ on page 3-47. 


Table 3-21 summarizes the PPC405GP instruction set functions by categories. Instructions within 
each category are described in subsequent sections. 


Table 3-21. PPC405GP Instruction Set Summary 


Interrupt Control write to external interrupt enable bit, move to/from MSR, return from interrupt, 
return from critical interrupt 

Processor Management | system call, synchronize, trap, move to/from DCRs, move to/from SPRs, move 
to/from CR 
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3.11.1 Instructions Specific to IBM PowerPC Embedded Processors 


To support functions required in embedded real-time applications, the IBM PowerPC 400 family of 
embedded processors defines instructions that are not defined in the PowerPC Architecture. 


Table 3-22 lists the instructions specific to IBM PowerPC embedded processors. Programs using 
these instructions are not portable to PowerPC implementations that are not part of the IBM PowerPC 
400 family of embedded processors. 


In the table, the syntax [s] indicates that the instruction has a signed form. The syntax [u] indicates 
that the instruction has an unsigned form. The syntax “[.]” indicates that the instruction has a “record” 
form that updates CR[CRO], and a “non-record” form. 


Table 3-22. Implementation-specific Instructions 


dccci ~ | macchw{s][u] mfdcr 
dcread machhw{s][u] mtder 
iccci maclhw{[s][uj rfci 
icread nmacchwi{s] tlbre 


nmachhw{s] tlbsx[.] 

nmaclhw{s] tlbwe 
wrtee 
wrteei 


3.11.2 Storage Reference Instructions | 


Table 3-23 lists the PPC405GP storage reference instructions. Load/store instructions transfer data 
between memory and the GPRs. These instructions operate on bytes, halfwords, and words. Storage 
reference instructions also support loading or storing multiple registers, character strings, and byte- 
reversed data. 


In the table, the syntax “[u]” indicates that an instruction has an “update” form that updates the RA 
addressing register with the calculated address, and a “non-update” form. The syntax “[x]” indicates 
that an instruction has an “indexed” form, which forms the address by adding the contents of the RA 
and RB GPRs) and a “base + displacement” form (in which the address is formed by adding a 16-bit 
signed immediate value (included as part of the instruction word) to the contents of RA GPR. 


Table 3-23. Nia Reference Instructions 


Loads 


| Byte | | Halfword | Word | Multiple/String | Word | Muitiple/String | 
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3.11.3 Arithmetic Instructions 


Arithmetic operations are performed on integer operands stored in GPRs. Instructions that perform 
operations on two operands are defined in a three-operand format; an operation is performed on the 
operands, which are stored in two GPRs. The result is placed in a third, operand, which is stored ina 
GPR. Instructions that perform operations on one operand are defined using a two-operand format; 
the operation is performed on the operand in a GPR and the result is placed in another GPR. Several 
instructions also have immediate formats in which an operand is contained in a field in the instruction 
word. 


Most arithmetic instructions have versions that can update CR[CRO] and XER[SO, OV], based on the 
result of the instruction. Some arithmetic instructions also update XER[CA] implicitly. See “Condition 
Register (CR)” on page 3-12 and “Fixed Point Exception Register (XER)” on page 3-8 for more 
information. - , 


Table 3-24 lists the PPC405GP arithmetic instructions. In the table, the syntax “[o]’ indicates that an 
instruction has an “o” form that updates XER[SO,OV], and a “non-o” form. The syntax “[.]’ indicates 
that the instruction has a “record” form that updates CR[CRO], and a “non-record” form. 


Table 3-24. Arithmetic Instructions 


add[o][.] subf[o][.] divw(o][.] 
addc[o][.] subfc[o][.] divwu[o][.] 
adde[o][.] subfe[o][.] 


subfic 
subfme[o][.] 
subfze[o].] 
addmef[o][.] 
addze[o][.] 
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Table 3-25 lists additional arithmetic instructions for multiply-accumulate and multiply halfword 
operations. In the table, the syntax “[o]” indicates that an instruction has an “o” form that updates 
XER[SO,OV], and a “non-o” form. The syntax “[.]” indicates that the instruction has a “record” form 
that updates CR[CRO], and a “non-record” form. 


Table 3-25. Multiply-Accumulate and Multiply Halfword Instructions 


Negative- 
Multiply- Multiply- Multiply 
Accumulate Accumulate Halfword 


macchwi[o][.] nmacchwfo][.] mulchw{,.] 
macchwsj[o][.] nmacchwsj[o][.]}_ | mulchwul[.] 
macchwsu[o][.} | nmachhwi[oj[.] mulhhw[.] 
macchwuf[o][.] nmachhwsf[o][.] | mulhhwu{.] 
machhw(o][.] nmaclhwi(o][.] mullhw[.] 
machhwsj[o][.] nmaclhws[o][.] mullhwuf[.] 
machhwsu[o][.] 
machhwu[o][.] 
maclhw[o][.] 
maclhwsjfo][.] 
maclhwsu[(o][.] 
maclhwu[o][.] 


3.11.4 Logical Instructions 


Table 3-26 lists the PPC405GP logical instructions. In the table, the syntax “[.]” indicates that the 
instruction has a “record” form that updates CR[CRO], and a “non-record” form. 


Table 3-26. Logical Instructions 


Count 
And with Or with leading 
complement complement Equivalence zeros 
and[.] or(.] xor[.] extsb[.] 
andi. ori xori extsh[.] 
andis. oris xoris 


3.11.5 Compare Instructions 


These instructions perform arithmetic or logical comparisons between two operands and update the 
CR with the result of the comparison. 


Table 3-27 lists the PPC405GP compare instructions. 


Table 3-27. Compare Instructions 


pret | Tsien 
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3.11.6 Branch Instructions 


These instructions unconditionally or conditionally branch to an address. Conditional branch 
instructions can test condition codes set by a previous instruction and branch accordingly. Conditional 
branch instructions can also decrement and test the CTR as part of branch determination, and can 
save the return address in the LR.The target address for a branch can be a displacement from the 
current instruction address (a relative address), an absolute address, or contained in the CTR or LR. 


See “Branch Processing” on page 3-34 for more information on branch operations. 


Table 3-28 lists the PPC405GP branch instructions. In the table, the syntax “{I]” indicates that the 
instruction has a “link update” form that updates LR with the address of the instruction after the 
branch, and a “non-link update” form. The syntax “[a]” indicates that the instruction has an “absolute 
address” form, in which the target address is formed directly using the immediate field specified as 
part of the instruction, and a “relative” form, in which the target address is formed by adding the 
immediate field to the address of the branch instruction). 


Table 3-28. Branch Instructions 


b[l][a] 


be[I][a] 
bectr{[l] 
belr[l] 


3.11.6.1 CR Logical Instructions 


These instructions perform logical operations on a specified pair of bits in the CR, placing the result in 
another specified bit. These instructions can logically combine the results of several comparisons 
without incurring the overhead of conditional branch instructions. Software performance can 
significantly improve if multiple conditions are tested at once as part of a branch decision. 


Table 3-29 lists the PPC405GP condition register logical instructions. 


Table 3-29. CR Logical Instructions 


crand crnor 
crandc cror 
creqv crorc 


crnand crxor 
merf 


3.11.6.2 Rotate Instructions 


These instructions rotate operands stored in the GPRs. Rotate instructions can also mask rotated 
operands. 


Table 3-30 lists the PPC405GP rotate instructions. In the table, the syntax “[.]” indicates that the 
instruction has a “record” form that updates CR[CRO], and a “non-record” form. 


Table 3-30. Rotate Instructions 


Rotate and Insert | Rotate and Mask 
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3.11.6.3 Shift Instructions 
These instructions rotate operands stored in the GPRs. 


Table 3-31 lists the PPC405GP shift instructions. Shift right algebraic instructions implicitly update 
XER[CA]. In the table, the syntax “[.]” indicates that the instruction has a “record” form that updates 
CR[CRO], and a “non-record” form. 


Table 3-31. Shift Instructions 


Shift Right 
Shift Left Algebraic 


3.11.6.4 Cache Management Instructions 


These instructions control the operation of the ICU and DCU. Instructions are provided to fill or 
invalidate instruction cache blocks. Instructions are also provided to fill, flush, invalidate, or zero data 
cache blocks, where a block is defined as a 32-byte cache line. 


Table 3-32 lists the PPC405GP cache management instructions. 


Table 3-32. Cache Management Instructions 


dcba Icbi 
dcbf Icbt 
dcbi iccci 
dcbst Icread 
dcbt 

dcbtst 

dcbz 

dccci 

dcread 


3.11.7 Interrupt Control Instructions 


mfmsr and mtmsr read and write data between the MSR and a GPR to enable and disable 
_ interrupts. wrtee and wrteei enable and disable external interrupts. rfi and rfci return from interrupt 
handlers. Table 3-33 lists the PPC405GP interrupt control instructions. 


Table 3-33. Interrupt Control Instructions 


mfmsr 
mtmsr 
rfi 


rici 
wrtee 
wrteei 


3-52 PPC405GP User’s Manual , Preliminary 


3.11.8 TLB Management Instructions 


The TLB management instructions read and write entries of the TLB array in the MMU, search the 
TLB array for an entry which will translate a given address, and invalidate all TLB entries. There is 
also an instruction for synchronizing TLB updates with other processors, but because the PPC405GP 
is for use in uniprocessor environments, this instruction performs no operation. 


Table 3-34 lists the TLB management instructions. In the table, the syntax “[.]” indicates that the 
instruction has a “record” form that updates CR[CRO], and a “non-record” form. 


Table 3-34. TLB Management Instructions 


3.11.9 Processor Management Instructions 


These instructions move data between the GPRs and SPRs, the CR, and DCRs in the PPC405GP, 
and provide traps, system calls, and synchronization controls. 


Table 3-35 lists the processor management instructions in the PPC405GP. 


Table 3-35. Processor Management Instructions 


merxr mtcrf 
mfcr mtdcr 
mfdcer mtspr 


mfspr 


3.11.10 Extended Mnemonics 


In addition to mnemonics for instructions supported directly by hardware, the PowerPC Architecture 
defines numerous extended mnemonics. 


An extended mnemonic translates directly into the mnemonic of a hardware instruction, typically with 
carefully specified operands. For example, the PowerPC Architecture does not define a “shift right 
word immediate” instruction, because the “rotate left word immediate then AND with mask,” (rlwinm) 
instruction can accomplish the same result: . 


rlwinm RA,RS,32—n,n,31 


However, because the required operands are not obvious, the PowerPC Architecture defines an 
~ extended mnemonic: . 


srwi RA,RS,n 


Extended mnemonics transfer the problem of remembering complex or frequently used operand 
combinations to the assembler, and can more clearly reflect a programmer's intentions. Thus, 
programs can be more readable. 


Refer to the following chapter and appendixes for lists of the extended mnemonics: 
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Chapter 24, “Instruction Set,” lists extended mnemonics under the associated hardware instruction 
mnemonics. 


Appendix A, “Instruction Summary,’ lists extended mnemonics alphabetically, along with the 
hardware instruction mnemonics. 


Table B-5 in Appendix B, “Instructions by Category,” lists all extended mnemonics. 
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Chapter 4. Cache Operations 


The PPC405GP incorporates two internal caches, a16KB instruction cache and an 8KB data cache. 
Instructions and data can be accessed in the caches much faster than in main memory. 


The instruction cache unit (ICU) controls instruction accesses to main memory and stores frequently 
used instructions to reduce the overhead of instruction transfers between the instruction pipeline and 
external memory. Using the instruction cache minimizes access latency for frequently executed 
instructions. 


The data cache unit (DCU) controls data accesses to main memory and stores frequently used data 
to reduce the overhead of data transfers between the GPRs and external memory. Using the data 
cache minimizes access latency for frequently used data. 


The ICU features: 

¢ Programmable address pipelining and prefetching for cache misses and non-cachable lines 
¢ Support for non-cachable hits from lines contained in fill buffer 

¢ Programmable non-cachable requests to memory as 4 or 8 words (line or half line) 

¢ Bypass path for critical words 

¢ Non-blocking cache for hits during fills 

e Flash invalidate (one instruction invalidates entire cache) 


¢ Programmable allocation for fetch fills, enabling program control of cache contents using the icbt 
instruction 


¢ Virtually indexed, physically tagged cache arrays 
¢ Support for 64-bit and 32-bit PLB slaves 

* Arich set of cache control instructions 

The DCU features: 


¢ Address pipelining for line fills 

¢ Support for load hits from non-cachable and non-allocated lines contained in fill buffer 
¢ Bypass path for critical words 

¢ Non-blocking cache for hits during fills 

¢ Write-back and write-through write strategies controlled by storage attributes 
¢ Programmable non-cachable load requests to memory as lines or words. 

¢ Handling of up to two pending line flushes. 

¢ Holding of up to three stores before stalling the core pipeline 

¢ Physically indexed, physically tagged cache arrays 

¢ Support for 64-bit and 32-bit PLB slaves 

e Arich set of cache control instructions 


“ICU Organization” on page 4-2 and “DCU Organization” on page 4-5 describe the organization and 
provide overviews of the ICU and the DCU. 
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4.1. ICU Organization 


The ICU manages instruction transfers between external cachable memory and the instruction queue 
in the execution unit. 


The ICU. contains a two-way set-associative 16KB cache memory. Each way is organized in 256 lines 
of eight words (eight instructions) each. 


As shown in Table 4-1, tag ways A and B store instruction address bits Ap-o1 for each line in cache 
ways A and B. Instruction address bits Aj9-0, serve as the index to the cache array. The two cache 
lines that correspond to the same line index (one in each way) are called a congruence class. 


Table 4-1. Instruction Cache Organization 


Agiy Line 254A | Ag.o Line 254B Line 254 A Line 254 B 
Ao:21 Line 255A Ao:21 Line 255 B Line 255A Line 255 B 


When a cache line is to be loaded, the cache way to receive the line is determined by using an least- 
recently-used (LRU) policy. The index, determined by the instruction address, selects a congruence 
class. Within a congruence class, the line which was accessed most recently is retained, and the 
other line is marked as LRU, using an LRU bit in the tag array. The line to receive the incoming data is 


the LRU line. After the cache line fill, the LRU bit is then set to identify as least-recently-used the line 
opposite the line just filled. 
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Figure 4-1 shows the relationships between the ICU and the instruction pipeline. 


Instructions from Memory 


Addresses to Memory 
Instruction 
Arrays 


Addresses from Fetcher 


Bypass Path 


PFB1 


PFBO Instruction Queue 


Figure 4-1. Instruction Flow 


4.1.1. ICU Operations 


Instructions from cachable memory regions are copied into the instruction cache array. The fetcher 
can access instructions much more quickly from a cache array than from memory. Cache lines are 
loaded either target-word-first or sequentially. Target-word-first fills start at the requested word, 
continue to the end of the line, and then wrap to fill the remaining words at the beginning of the line. 
Sequential fills start at the first word of the cache line and proceed sequentially to the last word of the 
line. 


The bypass path handles instructions in cache-inhibited memory and improves performance during 
line fill operations. If a request from the fetcher obtains an entire line from memory, the queue does 
not have to wait for the entire line to reach the cache. The target word (the word requested by the 
fetcher) is sent on the bypass path to the queue while the line fill proceeds, even if the selected line fill 
order is not target-word-first. 


Cache line fills always run to completion, even if the instruction stream branches away from the rest of 
the line. As requested instructions are received, they go to the fetcher from the fill register before the 
line fills in the cache. The filled line is always placed in the ICU; if an external memory subsystem 
error occurs during the fill, the line is not written to the cache. During a clock cycle, the ICU can send 
two instruction to the fetcher. 
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4.1.2 Instruction Cachability Control 


When instruction address translation is enabled (MSR[IR] = 1), instruction cachability is controlled by 
the | storage attribute in the translation lookaside buffer (TLB) entry for the memory page. If 
TLB_entry[I] = 1, caching is inhibited; otherwise caching is enabled. Cachability is controlled 
separately for each page, which can range in size from 1KB to 16MB. “Translation Lookaside Buffer 
(TLB)” on page 6-2 describes the TLB. 


When instruction address translation is disabled (MSR[IR] = 0), instruction cachability is controlled by 
the Instruction Cache Cachability Register (ICCR). Each field in the ICCR (ICCR[S0:S31]) controls 
the cachability of a 128MB region (see “Real-mode Storage Attribute Control” on page 6-17). If 
ICCR[Sn] = 1, caching is enabled for the specified region; otherwise, caching is inhibited. 


The performance of the PPC405GP is significantly lower while fetching instructions from cache- 
inhibited regions. 


Following system reset, address translation is disabled and all ICCR bits are reset to 0 so that no 
memory regions are cachable. Before regions can be designated as cachable, the ICU cache array 
must be invalidated. The iccci instruction must execute before the cache is enabled. Address 
translation can then be enabled, if required, and the TLB or the ICCR can then be configured for the 
required cachability. 


4.1.3 Instruction Cache Synonyms 


The following information applies only if instruction address translation is enabled (MSR[IR] = 1) and 
1KB or 4KB page sizes are used. See Chapter 6, mene Management,’ for information about 
address translation and page sizes. 


An instruction cache synonym occurs when the instruction cache array contains multiple cache lines 
from the same real address. Such synonyms result from combinations of: 


¢ Cache array size 

¢ Cache associativity 

¢ Page size 

¢ The use of effective addresses (EAs) to index the cache array 


For example, the instruction cache array has a "way size" of 8KB (16KB array/2 ways). Thus, 11 bits 
(EA49-09) are needed to select a word (instruction) in each way. For the minimum page size of 1KB, 
the low order 8 bits (EAgo.0g) address a word in a page. The high order address bits (EAg.o1) are 
translated to form a real address (RA), which the ICU uses to perform the cache tag match. Cache 
synonyms could occur because the index bits (EAj9.09) overlap the translated RA bits. For 1KB 
pages, overlap in EAjg.0, and RAj9-5; could result in as many as 8 synomyms. In other words, data 
from the same RA could occur as as manyas 8 llocations in the cache array. Similarly, for 4KB pages, 
EAp-19 are translated. Differences in EAyg and RAjg could result in as many as 2 synonyms. For the 
next largest page size (16KB), only EA 9.47 are translated. Because there is no overlap with index bits 
EA49-01, synonyms do not occur. 
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In practice, cache synonyms occur when a real instruction page having multiple virtual mappings 
exists in multiple cache lines. For 1KB pages, all EAs differing in EA;9-0; must be cast out of cache, 
using an icbi instruction for each such EA (up to 8 per cache line in the page). For 4KB pages, all EAs 
differing in EA;9 must be cast out in the same manner (up to 2 per cache line in the page). For larger 
pages, cache synonyms do not occur, and casting out any of the multiple EAs removes the physical 
information from the cache. 


Programming Note: To prevent the occurrence of cache synonyms, use only page sizes greater 
than the cache way size (8KB), if possible. For the PPC405GP, the minimum such page size is 
16KB. 


4.1.4 ICU Coherency 


The ICU does not “snoop” external memory or the DCU. Programmers must follow special procedures 
for ICU synchronization when self-modifying code is used or if a peripheral device updates memory 
containing instructions. 


The following code example illustrates the necessary steps for self-modifying code. This example 
assumes that addr7 is both data and instruction cachable. 


stw regN, addri_ _—# the data in regN is to become an instruction at addr1 
dcbst addr1 # forces data from the data cache to memory 
sync # wait until the data actually reaches the memory 
icbi addr1 # the previous value at addr1 might already be in 
the instruction cache; invalidate it in the cache 
isync # the previous value at addr1 may already have been 


pre-fetched into the queue; invalidate the queue 
so that the instruction must be re-fetched 


4.2 DCU Organization 


The DCU manages data transfers between external cachable memory and the general-purpose 
registers in the execution unit. 


The DCU contains a two-way set-associative 8KB1KB cache memory. Each way is organized in 128 
lines of eight words (32 bytes) each. 
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As shown in Table 4-2, tag ways A and B store data address bits Ap.19 for each line in cache ways A 
and B. Data address bits Aoo-9g serve as the index to the cache array. The two cache lines that 
correspond to the same line index (one in each way) are called a congruence class. 


Table 4-2. Data Cache Organization 


Ao:19 Line 126 A Ao:19 Line 126 B Line 126A Line 126 B 
Ao.19 Line 127 A Ao.19 Line 127 B Line 127A Line 127 B 


When a cache line is to be loaded, the cache way to receive the line is determined by using an LRU 
policy. The index, determined by the data address, selects a congruence class. Within a congruence 
class, the line which was accessed most recently is retained, and the other line is marked as LRU, 
using an LRU bit in the tag array. The line to receive the incoming data is the LRU line. After the cache 
line fill, the LRU bit is then set to identify as least-recently-used the line opposite the line just filled. 


A bypass path handles data operations in cache-inhibited memory and improves performance during 
line fill operations. 


4.2.1 DCU Operations 


Data from cachable memory regions are copied from external memory into lines in the data cache 
array so that subsequent cache operations result in cache hits. Loads and stores that hit in the DCU 
are completed in one cycle. For loads, GPRs receive the requested byte, halfword, or word of data 
from the data cache array. The DCU supports byte-writeability to improve the performance of byte and 
halfword store operations. 


Cache operations require a line fill when they require data from cachable memory regions that are not 
currently in the DCU. A line fill is the movement of a cache line (eight words) from external memory to 
the data cache array. Eight words are copied from external memory into the fill buffer, either target- 
word-first or sequentially. Loading order is controlled by the PLB slave. Target-word-first fills start at 
the requested word, continue to the end of the line, and then wrap to fill the remaining words at the 
beginning of the line. Sequential fills start at the first word of the cache line and proceed sequentially . 
to the last word of the line. In both types of fills, the fill buffer, when full, is transferred to the data cache 
array. The cache line is marked valid when it is filled. 


Loads that result in a line fill, and loads from non-cachable memory, are sent to a GPR. The 
requested byte, halfword, or word is sent from the DCU to the GPR from the fill buffer, using a cache 
bypass mechanism. Additional loads for data in the fill buffer can be bypassed to the GPR until the 
data is moved into the data array. 


Stores that result in a line fill have their data held in the fill buffer until the line fill completes. Additional 
stores to the line being filled will also have their data placed in the fill buffer before being transferred 
into the data cache array. 
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To complete a line fill, the DCU must access the tag and data arrays. The tag array is read to 
determine the tag addresses, the LRU line, and whether the LRU line is dirty. A dirty cache line is one 
that was accessed by a store instruction after the line was established, and can be inconsistent with 
external memory. If the line being replaced is dirty, the address and the cache line must be saved so 
that external memory can be updated. During the cache line fill, the LRU bit is set to identify the line 
opposite the line just filled as LRU. 


When a line fill completes and replaces a dirty line, a line flush begins. A flush copies updated data in 
the data cache array to main storage. Cache flushes are always sequential, starting at the first word 
of the cache line and proceeding sequentially to the end of the line. 


Cache lines are always completely flushed or filled, even if the program does not request the rest of 
the bytes in the line, or if a bus error occurs after a bus interface unit accepts the request for the line 
fill. If a bus error occurs during a line fill, the line is filled and the data is marked valid. However, the 
line can contain invalid data, and a machine check exception occurs. 


4.2.2 DCU Write Strategies 


DCU operations can use write-back or write-through strategies to maintain coherency with external 
cachable memory. 


The write-back strategy updates only the data cache, not external memory, during store operations. 
Only modified data lines are flushed to external memory, and then only when necessary to free up 
locations for incoming lines, or when lines are explicitly flushed using debf or debst instructions. The 
write-back strategy minimizes the amount of external bus activity and avoids unnecessary contention 
for the external bus between the ICU and the DCU. 


The write-back strategy is contrasted with the write-through strategy, in which stores are written 
simultaneously to the cache and to external memory. A write-through strategy can simplify 
maintaining coherency between cache and memory. 


When data address translation.is enabled (MSR[DR] = 1), the W storage attribute in the TLB entry for 
the memory page controls the write strategy for the page. If TLB_entry[W] = 0, write-back is selected; 
otherwise, write-through is selected. The write strategy is controlled separately for each page. 
“Translation Lookaside Buffer (TLB)” on page 6-2 describes the TLB. 


When data address translation is disabled (MSR[DR] = 0), the Data Cache Write-through Register 
(DCWR) sets the storage attribute. Each bit in the DCWR (DCWR[W0:W31)) controls the write 
strategy of a 128MB storage region (see “Real-mode Storage Attribute Control” on page 6-17). If 
DCWR[Wn] = 0, write-back is enabled for the specified region; otherwise, write-through is enabled. 


Programming Note: The PowerPC Architecture does not support memory models in which 
write-through is enabled and caching is inhibited. 

4.2.3 DCU Load and Store Strategies 

The DCU can control whether a load receives one word or one line of data from main memory. 


For cachable memory, the load without allocate (LWOA) field of the CCRO controls the type of load 
resulting from a load miss. If CCRO[LWOA] = 0, a load miss causes a line fill. if CCRO[LWOA] = 1, 
load misses do not result in a line fill, but in a word load from external memory. For infrequent reads of 
non-contiguous memory, setting CCRO[LWOA] = 1 may provide a small performance improvement. 
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For non-cachable memory and for loads misses when CCRO[LWOA] = 1, the load word as line (LWL) 
field in the CCRO affects whether load misses are satisfied with a word, or with eight words (the 
equivalent of a cache line) of data. If CCRO[LWL] = 0, only the target word is bypassed to the core. If 
CCRO[LWL] = 1, the DCU saves eight words (one of which is the target word) in the fill buffer and 
bypasses the target data to the core to satisfy the load word request. The fill buffer is not written to the 
data cache array. 


Setting CCRO[LWL] = 1 provides the fastest accesses to sequential non-cachable memory. 
_ Subsequent loads from the same line are bypassed to the core from the fill buffer and do not result in - 
additional external memory accesses. The load data remains valid in the fill buffer until one of the 
following occurs: the beginning of a subsequent load that requires the fill buffer, a store to the target 
address, a debi or dcecci instruction issued to the target address, or the execution of a sync 
instruction. Non-cachable loads to guarded storage never cause a line transfer on the PLB even if 
CCRO[LWL] = 1. Subsequent loads to the same non-cachable storage are always requested again 
from the PLB. 


For cachable memory, the store without allocate (SWOA) field of the CCRO controls the type of store 
resulting from a store miss. If CCRO[SWOA] = 0, a store miss causes a line fill. If CCRO[SWOA] = 1, 
store misses do not result.in a line fill, but in a single word store to external memory. 


4.2.4 Data Cachability Control 


When data address translation is disabled (MSR[DR] = 0), data cachability is controlled by the Data 
Cache Cachability Register (DCCR). Each bit in the DCCR (DCCR[S0:S31]) controls the cachability 
of a 128MB region (see “Real-mode Storage Attribute Control” on page 6-17). If DCCR[Sn] = 1, 
caching is enabled for the specified region; otherwise, caching is inhibited. 


When data address translation is enabled (MSR[DR] = 1), data cachability is controlled by the | bit in 
the TLB entry for the memory page. If TLB_entry[l] = 1, caching is inhibited; otherwise caching is 
enabled. Cachability is controlled separately for each page, which can range in size from 1KB to 
16MB. “Translation Lookaside Buffer (TLB)” on page 6-2 describes the TLB. 


Programming Note: The PowerPC Architecture does not support memory models in which 
write-through is enabled and caching is inhibited. 


The performance of the PPC405GP is significantly lower while accessing memory in cache-inhibited 
regions. 


Following system reset, address translation is disabled and all DCCR bits are reset to 0 so that no 
memory regions are cachable. The decci instruction must execute 128before regions can be 
designated as cachable. This invalidates all congruence classes before enabling the cache. Address 
translation can then be enabled, if required, and the TLB or the DCCR can then be configured for the 
desired cachability. 


Programming Note: If a data block corresponding to the effective address (EA) exists in the 
cache, but the EA is non-cachable, loads and stores (including debz) to that address are 
considered programming errors (the cache block should previously have been flushed). The only 
instructions that can legitimately access such an EA in the data cache are the cache 
management instructions debf, debi, dcbst, dcbt, dcbtst, dccci, and dcread. 
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4.2.5 DCU Coherency 


The DCU does not provide snooping. Application programs must carefully use cache-inhibited 
regions and cache control instructions to ensure proper operation of the cache in systems where 
external devices can update memory. 


4.3 Cache Instructions 


For detailed descriptions of the instructions described in the following sections, see Chapter 24, 
“Instruction Set.” 


In the instruction descriptions, the term “block” is synonymous with cache line. A block is the unit of 
storage operated on by all cache block instructions. 


4.3.1. ICU Instructions 


The following instructions control instruction cache operations: 


icbi Instruction Cache Block Invalidate 
Invalidates a cache block. 
icbt Instruction Cache Block Touch 


Initiates a block fill, enabling a program to begin a cache block fetch before the 
program needs an instruction in the block. 


The program can subsequently branch to the instruction address and fetch the 
instruction without incurring a cache miss. 


This is a privileged instruction. 

iccci Instruction Cache Congruence Class Invalidate 
Invalidates the instruction cache array. 
This is a privileged instruction. 

icread Instruction Cache Read 


Reads either an instruction cache tag entry or an instruction word from an 
instruction cache line, typically for debugging. Fields in CCRO control instruction 
behavior (see “Cache Control and Debugging Features” on page 4-11). 


This is a privileged instruction. 
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4.3.2 DCU Instructions 


Data cache flushes and fills are triggered by load, store and cache control instructions. Cache control 
instructions are provided to fill, flush, or invalidate cache blocks. 


The following instructions control data cache operations. — 


dcba 


dcbf 


debi 


dcbst 


debt 


dcbtst 


4-10 


Data Cache Block Allocate 
Speculatively establishes a line in the cache and marks the line as modified. 


If the line is not currently in the cache, the line is established and marked as 
modified without actually filling the line from external memory. 


If dcba references a non-cachable address, dcba is treated as a no-op. 


If dcba references a cachable address, write-through required (which would 
otherwise cause an alignment exception), dcba is treated as a no-op. 


Data Cache Block Flush 


Flushes a line, if found in the cache and marked as modified, to external memory; 
the line is then marked invalid. 


If the line is found in the cache and is not marked modified, the line is marked invalid 
but is not flushed. 


This operation is performed regardless of whether the address is marked cachable. 
Data Cache Block Invalidate 


Invalidates a block, if found in the cache, regardless of whether the address is 
marked cachable. Any modified data is not flushed to memory. 


This is a privileged instruction. 
Data Cache Block Store 


Stores a block, if found in the cache and marked as modified, into external memory; 
the block is not invalidated but is no longer marked as modified. 


If the block is marked as not modified in the cache, no operation is performed. 


This operation is performed regardless of whether the address is marked cachable. 
Data Cache Block Touch 


Fills a block with data, if the address is cachable and the data is not already in the 
cache. If the address is non-cachable, this instruction is a no-op. 


Data Cache Block Touch for Store 


Implemented identically to the debt instruction for compatibility with compilers and 
other tools. 
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dcbz Data Cache Block Set to Zero 
Fills a line in the cache with zeros and marks the line as modified. 


If the line is not currently in the cache (and the address is marked as cachable and 
non-write-through), the line is established, filled with zeros, and marked as modified 
without actually filling the line from external memory. If the line is marked as either 
non-cachable or write-through, an alignment exception results. 


dccci Data Cache Congruence Class Invalidate 
Invalidates a congruence class (both cache ways). 
This is a privileged instruction. 

dcread Data Cache Read 


Reads either a data cache tag entry or a data word from a data cache line, typically 
for debugging. Bits in CCRO control instruction behavior (see “Cache Control and 
Debugging Features” on page 4-11). 


This is a privileged instruction. 


4.4 Cache Control and Debugging Features 


Registers and instructions are provided to control cache operation and help debug cache problems. 
For ICU debug, the icread instruction and the Instruction Cache Debug Data Register (ICDBDR) are 
provided. See “ICU Debugging” on page 4-14 for more information. For DCU debug, the dcread 
instruction is provided. See “DCU Debugging”.on page 4-15 for more information. 


CCRO controls the behavior of the icread and the dcread instructions. 


LWL SWOA _ IPP LBDE PFNC FWOA : CWS 


nD Hc ND A I aD 


LWOA DPP1 UOXE PFC NCRS cis 


Figure 4-2. Core Configuration Register 0 (CCRO) 


ee Rw 


if Load Word as Line 


0 The DCU performs load misses or non- 
cachable loads as words, halfwords, or 
bytes, as requested 

1 For load misses or non-cachable loads, 

the DCU moves eight words (including 

the target word) into the line buffer 
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Load Without Allocate 

0 Load misses result in line fills 

1 Load misses do not result in a line fill, but 
in non-cachable loads 


Store Without Allocate 

0 Store misses result in line fills 

1 Store misses do not result in line fills, but 
in non-cachable stores 


DCU PLB Priority Bit 1 Note: DCU logic dynamically controls DCU 
0 DCU PLB priority 0 on bit 1 priority bit 0. 
1 DCU PLB priority 1 on bit 1 


ICU PLB Priority Bits 0:1 

00 Lowest ICU PLB priority 

01 Next to lowest ICU PLB priority 
10 Next to highest [CU PLB priority 
11 Highest ICU PLB priority 


| Reserved 


Enable UO Exception 
0 Enables the U0 exception 
1 Disables the UO exception 


Load Debug Enable 

0 Load data is invisible on data-side (on- 
chip memory (OCM) 

1 Load data is visible on data-side OCM 


| Reserved 


ICU Prefetching for Cachable Regions 

0 Disables prefetching for cachable 
regions 

1 Enables prefetching for cachable regions 


ICU Prefetching for Non-Cachable Regions 

0 Disables prefetching for non-cachable 
regions 

1 Enables prefetching for non-cachable 
regions 

Non-cachable ICU request size 


0 Requests are for four-word lines 
1 Requests are for eight-word lines 


Fetch Without Allocate 

0 An ICU miss results in a line fill. 

1 An ICU miss does not cause a line fill, 
but results in a non-cachable fetch. 


Reserved 


Cache Information Select 
O Information is cache data. 
1 Information is cache tag. 


| Reserved 
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Cache Way Select 
0 Cache way is A. 


1 Cache way is B. 


4.4.1 CCRO Programming Guidelines 


Several fields in CCRO affect ICU and DCU operation. Altering these fields while the cache units are 
involved in PLB transfers can cause errant operation, including a processor hang. 


To guarantee correct ICU and DCU operation, specific code sequences must be followed when 
altering CCRO fields. 


CCRO[IPP, FWOA] affect ICU operation. When these fields are altered, execution of the following 
code sequence (Sequence 1) is required. 


! SEQUENCE 1 Altering CCRO[IPP, FWOA] 
! Turn off interrupts 

mfmsr RM 

addis RZ,r0,0x0002 ! CE bit 

ori RZ,RZ,0x8000 ! EE bit 

andc RZ,RM,RZ —! Turn off MSR[CE,EE] 
mtmsr RZ 

! sync 

sync 

! Touch code sequence into i-cache 

addis RX,r0,seqi @h 


ori RX,RX,seq1 @I 
icbt r0,RX 

! Call function to alter CCRO bits 
b seq 

back: 


! Restore MSR to original value 
mtmsr RM 


! The following function must be in cacheable memory 


.align 5 ! Align CCRO altering code on a cache line boundary. 

seqt: 

icbt r0,RX ! Repeat ICBT and execute an ISYNC to guarantee CCRO 
isync ! altering code has been completely fetched across the PLB. 


mfspr RN,CCRO ! Read CCRO. 

andi/ori RN,RN,OxXXXX_ =! Execute and/or function to change any CCRO bits. 
! Can use two instructions before having to touch 
! in two cache lines. 
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mtspr CCRO, RN ! Update CCRO. 
isync ! Refetch instructions under new processor context. 
b back ! Branch back to initialization code. 


CCRO[DPP1, UOXE] affect DCU operation. When these fields are altered, execution of the following 
code sequence (Sequence 2) is required. Note that Sequence 1 includes Sequence 2, so Sequence 
1 can be used to alter any CCRO fields. 


In the following sample code, registers RN, RM, RX, and RZ are any available GPRs. 


! SEQUENCE 2 Alter CCRO[DPP1, UOXE) 
! Turn off interrupts 
mfmsr’ RM 
addis RZ,r0,0x0002 ! CE bit 
ori RZ,RZ,0x8000 ! EE bit 
andc RZ,RM,RZ — ! Turn off MSR[CE,EE] 
mtmsr RZ 
! sync 
sync 
! Alter CCRO bits 
mfspr RN,CCRO  ! Read CCRO. 
andi/ori RN,RN,OxXXXX_ ! Execute and/or function to change any CCRO bits. 
mtspr CCRO, RN _ ! Update CCRO. 


isyne ! Refetch instructions under new processor context. 
! Restore MSR to original value 
mtmsr RM 


CCRO[CIS, CWS] do not require special programming. 


4.4.2 ICU Debugging 


The icread instruction enables the reading of the instruction cache entries for the congruence class 
specified by EAjg.og. The cache information is read into the ICDBDR; from there it can subsequently 
be moved, using a mfspr instruction, into a GPR. 


Figure 4-3. Instruction Cache Debug Data Register (ICDBDR) 


0:31 ed Instruction cache information See icread, page 24-68. 
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ICU tag information is placed into the ICDBDR as shown: 


TAG | Cache Tag 


faees_[ [evened 


Cache Line Valid 
0 Not valid 
1 Valid 


LRU Least Recently Used (LRU) 
0 A-way LRU 
1 B-way LRU 


If CCRO[CIS] = 0, the data is a word of ICU data from the addressed line, specified by EAo7.99. If 
CCRO[CWS] = 0, the data is from the A-way; otherwise; the data from the B-way. 


If CCRO[CIS] = 1, the cache information is the cache tag. If CCRO[CWS] = 0, the tag is from the A- 
way; otherwise, the tag is from the B-way. 


Programming Note: The instruction pipeline does not wait for data from an icread instruction to 
arrive before attempting to use the contents the ICDBDR. The following code sequence ensures 
proper results: 


icread r5,r6# read cache information 
isync # ensure completion of icread 
mficdbdr r7# move information to GPR 


4.4.3 DCU Debugging 


The dcread instruction provides a debugging tool for reading the data cache entries for the 
- congruence class specified by EAzo-og. The cache information is read into a GPR. 


If CCRO[CIS] = 0, the data is a word of DCU data from the addressed line, specified by EAo7.99. If 
CCRO[CWS] = 0, the data is from the A-way; otherwise; the data is from the B-way. 


If CCRO[CIS] = 1, the cache information is the cache tag. If CCRO[CWS] = 0, the tag is from the A- 
way; otherwise the tag is from the B-way. 
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DCU tag information is placed into the GPR as shown: 


mas Rees 


26 Cache Line Dirty 
0 Not dirty 
1 Dirty 


27 V Cache Line Valid 
0 Not valid 
1 Valid 


a 


31 LRU | Least Recently Used (LRU) 
; 0 A-way LRU 
1 B-way LRU 


Note: A “dirty” cache line is one which has been accessed by a store instruction after it was 
established, and can be inconsistent with external memory. 


4.5 DCU Performance 


DCU performance depends upon the application, but, in general, cache hits complete in one cycle 
without stalling the CPU pipeline. Under certain conditions and limitations of the DCU, the pipeline 
stalls (stops executing instructions) until the DCU completes current operations. 


Several factors affect DCU performance, including: 


e Pipeline stalls 

¢ DCU priority 

e Simultaneous cache operations 
¢ Sequential cache operations 


4.5.1. Pipeline Stalls 


The CPU issues commands for cache operations to the DCU. If the DCU can immediately perform the 
requested cache operation, no pipeline stall occurs. In some cases, however, the DCU cannot , 
immediately perform the requested cache operation, and the pipeline stalls until the DCU can perform 
the pending cache operation. 


In general, the DCU, when hitting in the cache array, can execute a load/store every cycle. If a cache 
miss occurs, the DCU must retrieve the line from main memory. For cache misses, the DCU stores 
the cache line in a line buffer until the entire cache line is received. The DCU can accept new DCU 
commands while the fill progresses. If the instruction causing the line fill is a load, the target word is 
bypassed to the GPR during the cycle after it becomes available in the fill buffer. When the fill buffer is 
full, it must be moved into the tag and data arrays. During this time, the DCU cannot begin a new 
cache operation and stalls the pipeline if new DCU commands are presented. Storing a line in the line 
buffer takes 3 cycles, unless the line being replaced has been modified. In that case, the operation 
takes 4 cycles. 
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The DCU can accept up to two load commands. If the data for the first load command is not 
immediately available, the DCU can still accept the second load command. If the load data is not 
required by subsequent instructions, those instructions will continue to execute. If data is required 
from either load command, the CPU pipeline will stall until the load data has been delivered. The 
pipeline will also stall until the second load has read the data array if a subsequent data cache 
command is issued. 


In general, if the fill buffer is being used and the next load or store command requires the fill buffer, 
only one additional command can be accepted before causing additional DCU commands to stall the 
pipeline. 


The DCU can accept up to three outstanding store commands before stalling the CPU pipeline for 
additional data cache commands. 


The DCU can have two flushes pending before stalling the CPU pipeline. 


DCU cache operations other than loads and stores stall the CPU pipeline until all prior data cache 
operations complete. Any subsequent data cache command will stall the pipeline until the prior 
operation is complete. 


The pipeline stalls when on-chip memory (OCM) asserts a hold signal. For loads or stores that are 
held, the DCU can still accept one additional load or store command before stalling the pipeline for 
subsequent commands. 


4.5.2 Cache Operation Priorities 


The DCU uses a priority signal to improve performance when pipeline stalls occur. When the pipeline 
is stalled because of a data cache operation, the DCU asserts the priority signal to the PLB. The 
priority signal tells the external bus that the DCU requires immediate service, and is valid only when 
the data cache is requesting access to the PLB. The priority signal is asserted for all loads that 
require external data, or when the data cache is requesting the PLB and stalling an operation that is 
being presented to the data cache. 


Table 4-3 provides examples of when the priority is asserted and deasserted. 


Table 4-3. Priority Changes With Different Data Cache Operations 


Instruction 
Requesting PLB | Priority Priority 
Any load from 1 N/A N/A 
external memory 
|Anystore = | 0 Any other cache operation not being accepted by the DCU. ee te 
dcbf/dcbst ai Another command that requires a line flush. hs oe 


(eae RE ae eee eee Le) 
acco i (Le 1) 
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4.5.3 Simultaneous Cache Operations 


Some cache operations can occur simultaneously to improve DCU performance. For example, 
combinations of line fills, line flushes, word load/stores, and operations that hit in the cache can occur 
simultaneously. Cache operations other than loads/stores cannot begin until the PLB completes all 
previous operations. 


4.5.4 Sequential Cache Operations 


Some common cache operations, when performed sequentially, can limit DCU performance: 
sequential loads/stores to non-cachable storage regions, sequential line fills, and sequential line 
flushes. 


In the case of sequential cache hits, the most commonly occurring operations, the DCU loads or 
stores data every cycle. In such cases, the DCU does not limit performance. 


However, when a load from a non-cachable storage region is followed by multiple loads from non- 
cachable regions, the loads can complete no faster than every four cycles, assuming that the 
addresses are accepted during the same cycle in which it is requested, and that the data is returned 
during the cycle after the load is accepted. 


Similarly, when a store to a non-cachable storage region is followed by multiple stores to non- 
cachable regions the fastest that the stores can complete is every other cycle. The DCU can have 
accepted up to three stores before additional DCU commands will stali waiting for the prior stores to 
complete. 


Sequential line fills can limit DCU performance. Line fills occur when a load/store or debt instruction 
misses in the cache, and can be pipelined on the PLB interface such that up to two requests can be 
accepted before stalling subsequent requests. The subsequent operations will wait in the DCU until 
the first line fill completes. The line fills must complete in the order that they are accepted. 


Sequential line flushes from the DCU to main memory also limit DCU performance. Flushes occur 
when a line fill replaces a valid line that is marked dirty (modified), or when a debf instruction flushes 
a specific line. If two flushes are pending, the DCU stalls any new data cache operations until the first 
flush finishes and the second flush begins. 
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Chapter 5. On-Chip Memory 


The on-chip memory (OCM) subsystem consists of a memory controller that connects the 
PPC405GP processor core to a one-port, 4KB on-chip SRAM array. OCM is ideal for applications 
requiring low-latency access to critical instructions and data. OCM can provide performance that is 
identical to cache hits, yet, unlike a cache, the OCM never misses. Instructions and data stored in the 
OCM are always available because OCM contents only change under program control. Therefore, if 
the programmer avoids instruction-side and data-side OCM access contention, OCM can provide 
information availability that is superior to a cache line locking scheme. OCM is superior because it 
can provide single cycle performance identical to cache hits without locking down portions of the 
cache. This results in more effective cache utilization for the processor. 


Instructions and data returned from OCM interface do not flow through the PPC405GP core caches. 
The caches remain available for caching from other memory sources accessed across the PLB 
interface. The system designer must ensure that each address has a single access path into the 
PPC405GP core for a given software process. Each address that is requested should be found in 
either the OCM address space or the PLB address space, but not in both. 


Code to initialize OCM should execute in non-OCM address space in a region marked as non- 
cachable. The initialization code should invalidate the cache arrays (in the instruction cache unit (ICU) 
and data cache unit (DCU), as appropriate) to ensure that no addresses to be programmed as OCM 
space are in the cache. After programming the OCM address and control registers, the OCM address 
space should remain marked as non-cachable. Chip initialization for OCM usage is described in 
“OCM Initialization” on page 8-13. 


Read and write accesses to the OCM array share a single access port. OCM accesses have the 
following priorities: 


1. Data-side OCM reads (loads) 
2. Data-side OCM writes (stores) 
3. Instruction-side OCM read (fetches) 


Data-side OCM reads occur in one cycle. Data-side writes also complete in one cycle, though they 
can be pre-empted by higher priority data-side reads. Instruction-side OCM reads occur by default 
(that is, after a reset) in two cycles. However, when the Instruction-Side Two-Cycle Mode field of the 
OCM Instruction-Side Control Register is set to 0 (OCMO_ISCNTL[ISTCM] = 0), instruction-side OCM 
reads occur in one cycle, unless pre-empted by higher priority data-side transfers. Two-cycle mode is 
provided for chips that cannot make instruction-side timing to the processor core. The PPC405GP, 
however, meets the timing requirement. Therefore, programmers should set 

OCMO_ISCNTL[ISTCM] = 0 during chip initialization, as described in “OCM Initialization” on 

page 8-13. 


5.1 OCM Addressing 
The address space for the instruction-side OCM and the data side OCM are defined by the OCM 
Instruction-Side Address Range Compare Register (QCM0O_ISARC) and OCM Data-Side Address 


Range Compare Register (OCMO_DSARC), respectively. These registers are implemented as 6-bit 
registers that define the most significant address bits of the respective OCM address space. Using 6 
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bits defines a 64MB address space. The instruction side and data side can share a 64MB address 
space, or each can have its own 64MB address space. The address spaces are fully relocatable on 
64MB boundaries within the 4GB address space of the PPC405GP, but the programmer must assign 
OCM address space to avoid conflicts with other assigned addresses. See “Programming Model” on 
page 3-1 for information about the PPC405GP memory map. 


OCM Address Space OCM SRAM 


Figure 5-1. OCM Address Usage 


Figure 5-1 illustrates OCM address usage. The OCM SRAM array size is 4KB. Address bits 20:31 
select byte addresses for data-side accesses. Address bits 30:31 are ignored for instruction-side 
accesses, because instruction-side accesses return either one or two words per transfer. 


Note that the instruction-side and data-side OCM address spaces overlap physically, even if defined 
as distinct logical address spaces, because the 4KB SRAM is shared. There is no distinction between 
data space or instruction space, except as defined by the programmer. 


Addresses in the OCM array are aliased throughout the larger OCM address spaces. The larger OCM 
address spaces are filled with multiple images of the 4KB SRAM. Aliased addresses refer to the same 
physical memory locations. 


Programming Note: To avoid possible memory coherency problems when using aliased 
addresses, align aliased addresses on 16KB boundaries rather than on 4KB boundaries. See 
“Store Data Bypass Behavior and Memory Coherency” on page 5-3 for details. 


If address translation is enabled (MSR[IR, DR] = 1), one or more TLB entries for the OCM address 
space must exist to validate accesses. However, the virtual addresses are not translated, and 32-bit 
effective addresses (virtual addresses) are presented to OCM. 


Data-side OCM contents can use big endian or little endian byte ordering. Instruction-side OCM 
contents must use big endian byte ordering. See “Byte Ordering” on page 3-28 for detailed 
information about byte ordering. 


5.2 OCM Programming Guidelines 


The following guidelines prevent potential problems associated with using OCM: 


¢ Code that uses mtder to disable instruction-side OCM access should not run out of the instruction- 
side OCM. 


Instructions following an mtder are not guaranteed to be fetched before the instruction-side OCM 
is disabled. 


¢ Do not change the value in OCMO_ISARC while fetching from the instruction-side OCM. 
To change the value in OCMO_ISARC or OCMO_DSARC: 


1. Set OCMO_ISCNTL[ISEN] = 0 to disable instruction-side OCM accesses, or set 
OCMO_DSCNTL[DSEN] = 0 to disable data-side OCM accesses. 


5-2 PPC405GP User's Manual Preliminary 


2. Clear MSR[EE] and MSR[CE] to mask interrupts, to ensure that interrupts do not interfere with 
the cache invalidation described in Step 4. This avoids a potential problem with “dirty” cache 
addresses that would not be fetched from the cache because they have been marked as non- 
cachable. 


3. Mark the address region to be programmed as OCM address space as noncachable. 


4. Invalidate the cache array that corresponds to the OCM (instruction-side or data-side) whose 
address range compare register is to be modified to ensure that no addresses to be 
programmed as OCM addresses exist in the cache. A single iccci instruction invalidates the ICU 
cache array. To invalidate the DCU cache array, use a sequence of debf instructions (one per 
cache line). ; ' 


5. Modify the value in OCMO_ISARC or OCMO_DSARC. 


6. Set OCMO_ISCNTL[ISEN] = 1 to enable instruction-side OCM accesses, or set 
OCMO_DSCNTL[DSEN] = 1 to enable data-side OCM accesses. 


¢ Self-modifying code that accesses OCM to update instructions should not fetch instructions from 
the area being modified until a sync instruction executes, followed by an isync instruction. 


The sync instruction ensures that instructions are updated. The isync instruction ensures that only 
updated instructions are fetched into the pipeline. 


Instructions in OCM can be updated while instructions from non-OCM addresses execute. A sync- 
isync pair should still be used whenever such self-modifying code is updated. 


¢ The CPU can become less efficient when instructions and data in OCM are accessed at the same 
time, because the SRAM has only one access port and instruction fetches have the lowest priority. 


For example, instructions fetched from OCM that contain several sequential data-side loads 
accessing OCM can result in bubbles in the instruction pipeline. The sequential data-side loads 
dominate OCM accesses, resulting in the inability to fetch instructions from OCM. 


¢ lf aliased addresses are used, the aliased 4KB address spaces should be aligned on 16KB 
boundaries to eliminate potential store data bypass problems, as described in “Store Data Bypass 
Behavior and Memory Coherency.” 


5.3. Store Data Bypass Behavior and Memory Coherency 


The OCM subsystem provides only one mechanism, data-side store operations, for writing both 
instructions and data into the OCM array. However, two independent mechanisms request read 
access of OCM contents; one for instruction-side fetches and the other for data-side loads. 


The following description applies only to applications that alias the OCM address space and perform 
a mix of data-side loads and stores. It does not apply to applications that use data-side stores only to 
initialize OCM with instructions. 


If a data-side OCM store is followed in the next cycle by a data-side load, the load actually accesses 
the OCM array before the store. This is due to the nature of the processor pipeline, the cycle 
availability of the store data, and the fact that data-side loads have a higher priority than data-side 
stores. In this scenario, store data is queued in a register while the load accesses the array. Further, if 
the store is immediately followed by a sequence of consecutive loads, it remains in the queue until the 
last of the consecutive loads has accessed the OCM array. The queued store data is written into the 
OCM array in the first cycle that does not have a data-side load operation accessing the array. 
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Consider a scenario where such a situation causes store data to be held in the store data queue. If 
any of the loads access the same address as the address of the store operation whose data is being 
held in the store data queue, there is a need to bypass the store data from the store data queue to 
provide the correct data to the load operation. 


A bypass is determined to be required by comparing the pending store address with the load address. 
However, the comparison is done with a 16KB address representation for the load and store 
operations, not the 4KB address (the physical size of the PPC405GP OCM array). If the 16KB 
address compares, the store data is bypassed to the load operation. This implies that a bypass 
results for address aliasing only when the OCM addresses match at a 16KB multiple, which 
corresponds to a match of address bits 18:29 (a word address that is further specified by byte 
enables). Although the physical address space is aliased at 4KB multiples, the bypass determination 
- is made at 16KB multiples. Therefore, if bits 18:19 of an aliased load address do not match bits 18:19 
of the 16KB store address of the data being held in the store data queue, the load data will not be 
coherent. Instead of returning the most recently stored data, which is being held in the store data 
queue, the load returns “old” data previously stored in and accessed from the OCM array. 


Table 5-1 provides examples that describe bypass behavior when address aliasing is used. 


Table 5-1. Examples of Store Data Bypass 


4KB Aliased 16KB Aliased 


[1 [rasnn0700 | owooao0Tco | Same | Same | ves 
[2 | excao0er00~|~exo0000400 [No | No | No | 
[3 | ereoe50700 | @x0000 1700 —| Yes | Wa eas eat | No | 
[5 | oxao000%00 | oxoo004t00 [ves [ves ves 
[8 | xo0000%00 | Groo0get00 [ves +f ves—S«iT ses 


Example 1 provides the most basic example, in which the load and store addresses are the same. 
This results in the load accessing the queued store data, bypassing the OCM array to satisfy the load. 


Example 2 shows two different addresses that are not aliased (both addresses are in the 4KB SRAM 
address space). No bypass occurs, and the load returns the correct data from the OCM array. 


Examples 3 and 4 show aliased addresses that do not bypass data because the addresses do not 
compare within a 16KB address space. In both examples, address bits 18:19 do not match. In both 
examples, the load does not return the most recently stored data from the store data queue; the load 
returns the “old’ data from the array. To avoid such problems, alias on 16KB boundaries. If addresses 
are aliased on 4KB boundaries, place at least one instruction that does not access the data-side OCM 
between a load and a store to the same aliased address so the store data has a cycle to be written - 
into the array. 


Examples 5 and 6 bypass data out of the store data queue because the aliased addresses compare 
within a 16KB address space. In both nexempiee, address bits 18:29 match, and load data is returned 
from the store data queue. 
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5.4 Registers 


The OCM controller uses the Device Control Registers (DCRs) listed in Table 5-2. 
| Table 5-2. OCM DCRs 


Register 


[DCR Number [Access | Page 


5.4.1. OCM Instruction-Side Address Range Compare Register (OCM0_ISARC) 


OCMO_ISARC defines the address range of the OCM controller when it is presented with instruction 
fetch requests. OCMO_ISARC[ISAR] is compared to the high-order 6 bits of the requested instruction 
address, providing a 64MB address space. The address space can be shared with, or distinct from, 
the data-side OCM address space. 


The OCM controller returns requested instructions if instruction-side OCM access is enabled 
(OCMO_ISCNTL[ISEN] = 1) and OCMO_ISARC[ISAR] matches the high-order 6 bits of the requested 
instruction address. 


OCMO_ISARC must be initialized before OCMO_ISCNTL[ISEN] is set to 1 to enable instruction-side 
OCM accesses. See “OCM Initialization” on page 8-13 for details 


ISAR 


Figure 5-2. OCM Instruction-Side Address Range Compare Register (OCM0O_ISARC) 


|0:5 | ISAR | Instruction-side OCM address range 
feat [Rewned 
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5.4.2 OCM Instruction-Side Control Register (OCM0O_ISCNTL) 


OCMO_ISCNTL enables and disables instruction-side OCM access and controls whether instruction 
requests are satisfied in one or two cycles. 


OCMO_ISCNTL[ISEN] enables the OCM controller to respond to requests for instruction fetches to 
addresses in the instruction-side OCM address range defined by OCMO_ISARC[ISAR]. At reset, 
OCMO_ISCNTL[ISEN] = 0; instruction-side OCM is not enabled. If instruction-side OCM is to be 
accessed, this field must be set to 1 during chip initialization, as described in “OCM Initialization” on 
page 8-13. 


Setting OCMO_ISCNTL[ISTCM] = 1 places the instruction-side OCM in a mode in which accesses 
complete in no fewer than two cycles. Two-cycle mode is provided for chips that cannot make 
instruction-side timing to the processor core. The PPC405GP, however, meets the timing 
requirement. At reset, OCMO_ISCNTL[ISTCM] = 1. This field should be set to 0 during chip 
initialization so that instruction-side accesses can complete in one cycle. OCMO_ISCNTL[ISTCM] 
does not affect data-side OCM operation. 


Instruction-Side OCM Enable - 
0 Instruction-side OCM accesses are 


disabled. 


1 Instruction-side OCM accesses are 
enabled. 


Instruction-Side Two Cycle Mode OCMO_ISCNTL{ISTCM], which has a reset 
0 Instruction-side OCM accesses are value of 1, should be set to 

returned in one cycle. OCMO_ISCNTL[ISTCN] = 0 during chip 
1 Instruction-side OCM accesses are initialization. 

returned in two cycles. 


Eo 


5.4.3. OCM Data-Side Address Range Compare Register (OCM0_DSARC) 


OCMO0_DSARC defines the address range of the OCM controller when it is presented with load and 
store requests. OCMO_DSARC[DSAR] is compared to the high-order 6 bits of the requested data 
address, providing a 64MB address space. The address space can be shared with, or distinct from, 
the instruction-side OCM address space. 


The OCM controller transfers the requested load/store data if data-side OCM access is enabled 
(OCM0O_DSCNTL[DSEN] = 1) and OCMO_DSARC[DSAR] matches the high-order 6 bits of the 
requested data address. 
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OCMO_DSARC must be initialized before OCMO_DSCNTL[DSEN] is set to 1 to enable data-side 
OCM accesses. See “OCM Initialization” on page 8-13 for details. 


DSAR 


Figure 5-4. OCM Data-Side Address Range Compare Register (OCM0_DSARC) 


DSAR | Data-side OCM address range 
jesi_[ Renee 


5.4.4 OCM Data-Side Control Register (OCMO_DSCNTL) 
OCMO_DSCNTL enables and disables data-side OCM access. 


OCMO_DSCNTL[DSEN] enables the OCM controller to respond to requests for data loads and stores 
within the data-side OCM address range defined by OCMO_DSARC[DSAR]. At reset, 
OCMO0_DSCNTL[DSEN] = 0; data-side OCM is not enabled. If data-side OCM is to be accessed, this 
field must be set to 1 during chip initialization, as described in “OCM Initialization” on page 8-13. 


The reset value of the DOF field is 1. This field should always remain set to 1 when writing 
OCMO_DSCNTL. 


Figure 5-5. OCM Data-Side Control Register (OCMO_DSCNTL) 


DSEN Data-Side OCM Enable 
0 Data-side OCM accesses are disabled. 
1 Data-side OCM accesses are enabled. 
This field should remain set to 1. 
eat [oofReened 
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Chapter 6. Memory Management 


The PPC405GP memory management unit (MMU) performs address translation and protection 
functions. With appropriate system software, the MMU supports: 


¢ Translation of effective addresses to real addresses 

¢ Independent enabling of instruction and data address translation and protection 
e Page-level access control using the translation mechanism 

¢ Software control of page replacement strategy 

¢ Additional virtual-mode control of protection using zones 

¢ Real-mode write protection 


6.1 MMU Overview 


The instruction and integer units generate 32-bit effective addresses (EAs) for instruction fetches and 
data accesses, respectively. Instruction EAs are generated for sequential instruction fetches, and for 
instruction fetches causing changes in program flow (branches and interrupts). Data EAs are 
generated for load/store and cache control instructions. The MMU translates EAs into real addresses; 
the instruction cache unit (ICU) and data cache unit (DCU) use real addresses to access memory. 


The PPC405GP MMU supports demand-paged virtual memory and other memory management 
schemes that depend on precise control of effective to real address mapping and flexible memory 
protection. Translation misses and protection faults cause precise interrupts. Sufficient information is 
available to correct the fault and restart the faulting instruction. 


The MMU divides storage into pages. A page represents the granularity of EA translation and 
protection controls. Eight page sizes (1KB, 4KB, 16KB, 64KB, 256KB, 1MB, 4MB, 16MB) are 
simultaneously supported. A valid entry for a page containing the EA to be translated must be in the 
translation lookaside buffer (TLB) for address translation to be performed. EAs for which no valid TLB 
entry exists cause TLB-miss interrupts. 


6.2 Address Translation 


Fields in the Machine State Register (MSR) control the use of the MMU for address translation. The 
instruction relocate (IR) field of the MSR controls translation for instruction accesses. The data 
relocate (DR) field of the MSR controls the translation mechanism for data accesses. These fields, 
specified independently, can be changed at any time by a program in supervisor state. Note that all 

‘ interrupts clear MSR[IR, DR] and place the processor in the supervisor state. Subsequent discussion 
about translation and protection assumes that MSR[IR, DR] are set, enabling address translation. 


The processor references memory when it fetches an instruction, and when it executes load/store, 
branch, and cache control instructions. Processor accesses to memory use EAs to references a 
memory location. When translation is enabled, the EA is translated into a real address, as illustrated 
in Figure 6-1 on page 6-2. The ICU or DCU uses the real address for the access. (When translation is’ 
not enabled, the EA is already a real address.) 
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In address translation, the EA is combined with an 8-bit process ID (PID) to create a 40-bit virtual 
address. The virtual address is compared to all of the TLB entries. A matching entry supplies the real 
address for the storage reference. Figure 6-1 illustrates the process. 


32-bit EA 


PID Register [0:n-1] [7:31] 


ee eee Effective Page Address 
[0:23] [24:31] 


[n+8:39] 


| PID Effective Page Address Offset 


40-bit Virtual Addres 


Unified TLB 
64-entry Fully-associative Array 
[7:31] 
Offset 


Note: nis determined by page size. See 
Table 6-1, “TLB Fields Related to Page 


Size,” on page 6-4. 32-bit Real Address 


Real Page Number 


Figure 6-1. Effective to Real Address Translation Flow 


6.3 Translation Lookaside Buffer (TLB) 


The TLB is hardware that controls translation, protection, and storage attributes. The instruction and 
data units share a unified fully-associative TLB, in which any page entry (TLB entry) can be placed 
anywhere in the TLB. TLB entries are maintained under program control. System software determines 
the TLB entry replacement strategy and the format and use of page state information. A TLB entry 
contains the information required to identify the page, to specify translation and protection controls, 
and to specify the storage attributes. 


6.3.1 Unified TLB 


The unified TLB (UTLB) contains 64 entries; each has a TLBHI (tag) portion and a TLBLO (data) 
portion, as described in Figure 6-2 on page 6-3. TLBHI contains 36 bits; TLBLO contains 32 bits. 
When translation is enabled, the UTLB tag portion compares some or all of EAp.2; with some or all of 
the effective page number EPNo.o1, based on the size bits SIZEp.5. All 64 entries are simultaneously 
checked for a match. If an entry matches, the corresponding data portion of the UTLB provides the 
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real page number (RPN), access control bits (ZSEL, EX, WR), and storage attributes (W, |, M, G, E, 
UO).. 


PID (Process ID) . 
0 23 24 31 


TLBHI (Tag entry) 
0 21 22 242526 27 |28 35 


ee se feo 


TLBLO (Data entry) ; 
0 21 22 23 24 27 28293031 


ee SCO 
Figure 6-2. TLB Entries 


The virtual address space is extended by adding an 8-bit translation ID (TID) loaded from the Process 
ID (PID) register during a TLB access. The PID identifies one of 255 unique software entities, usually 
used as a process or thread ID. TLBHI[TID] is compared to the PID during a TLB look-up. 


Tag and data entries are written by copying data from GPRs and the PID, using the tlbwe instruction. 
Tag and data entries are read by copying data to GPRs and the PID, using the tlbre instruction. 
Software can search for specific entries using the tlbsx instruction. 


6.3.2 TLB Fields 


Each TLB entry describes a page that is enabled for translation and access controls. Fields in the TLB 
entry fall into four categories: 

¢ Information required to identify the page to the hardware translation mechanism 

¢ Control information specifying the translation 

¢ Access control information 

¢ Storage attribute contro! information 


6.3.2.1 Page Identification Fields 


When an EA is presented to the MMU for processing, the MMU applies several selection criteria to 
each TLB entry to select the appropriate entry. Although it is possible to place multiple entries into the 
TLB to match a specific EA and PID, this is considered a programming error, and the result of a TLB 
lookup for such an EA is undefined. The following fields in the TLB entry identify the page. Except as 
noted, all comparisons must succeed to validate an entry for subsequent use. 


EPN (effective page number, 22 bits) 


Compared to some number of the EAp.; bits presented to the MMU. The number of bits corresponds 
to the page size. 
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The exact comparison depends on the page size, as shown in Table 6-1. 
Table 6-1. TLB Flelds Related to Page Size 


Page nBits EPN to EA RPN Bits 
See | ie_[comara | campus _|‘Seto0. 
ee ee ee el 
Se eee ee 
A Ge 
a F00 | er | Pe 
a 
Ce 


SIZE (page size, 3 bits) 


Selects one of the eight page sizes, 1KB—16MB, listed in Table 6-1. 
V (valid,1 bit) 
Indicates whether a TLB entry is valid and can be used for translation. 


A valid TLB entry implies read access, unless overridden by zone protection. TLB_entry[V] can be 
written using a tlbwe instruction. The tlbia instruction invalidates all TLB entries. 


TID (translation ID, 8 bits) 


Loaded from the PID register during a tlbwe operation. The TID value is compared with the PID value 
during a TLB access. The TID provides a convenient way to associate a translation with one of 255 
unique software entities, typically a process or thread ID maintained by operating system software. 
Setting TLBHI[TID] = 0x00 disables TID-PID comparison and identifies a TLB entry as valid for all 
processes; the value of the PID register is then irrelevant. 


6.3.2.2 Translation Field 


When a TLB entry is identified as matching an EA (and possibly the PID), TLBLO[RPN] defines how 
the EA is translated. 


RPN (real page number, 22 bits) 


Replaces some, or all, of EAp.o1, depending on page size. For example, a 16KB page uses EAo.47 for 
comparison. The translation mechanism replaces EAg.47 with TLBLO[RPN]p.;7 to form the physical 
address, and EA;g.3, becomes the real page offset, as illustrated in Figure 6-1. 


Programming Note: Software must set all unused bits of RPN (as determined by page size) to 0. 
See Table 6-1. 
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6.3.2.3 Access Control Fields 
Several access controls are available in the UTLB entries. 
ZSEL (zone select, 4 bits) 


Selects one of 16 zone fields (ZO—Z15) from the Zone Protection Register (ZPR). The ZPR field bits 
can modify the access protection specified by the TLB_entry[V, EX, WR] bits of a TLB entry. Zone 
protection is described in detail in “Zone Protection” on page 6-13. 


EX (execute enable, 1 bit) 


When set (TLBLO[EX] = 1), enables instruction execution at addresses within a page. ZPR settings 
can override TLBLO[EX]; see “Zone Protection” on page 6-13, for more information. 


WR (write-enable 1 bit) 


When set (TLBLO[WR] = 1), enables store operations to addresses in a page. ZPR settings can 
override TLBLO[WR]; see “Zone Protection” on page 6-13. 


6.3.2.4 Storage Attribute Fields 


TLB entries contain bits that control and provide information about the storage control attributes. Four 
of the attributes (W, |, M, and G) are defined in the PowerPC Architecture. The E storage attribute is 
defined in the IBM PowerPC Embedded Environment. The UO attribute is implementation-specific. 
For the PPC405GP, UO controls the CodePack instruction decompression function. 


W (write-through,1 bit) 


When set (TLBLO[W] = 1), stores are specified as write-through. If data in the referenced page is in 
the data cache, a store updates the cached copy of the data and the external memory location. 
Contrast this with a write-back strategy, which updates memory only when a Cache line is flushed. 


In real mode, the Data Cache Write-through Register (DCWR) controls the write strategy. 


Note that the PowerPC Architecture does not support memory models in which write-through is 
enabled and caching is inhibited. !t is considered a programming error to use these memory models; 
the results are undefined. 


I (caching inhibited,1 bit) 


When set (TLBLO[I] = 1), a memory access is completed by using the location in main memory, 
bypassing the cache arrays. During the access, the accessed location is not put into the cache arrays. 


In real mode, the Instruction Cache Cachability Register (ICCR) and Data Cache Cachability Register 
(DCCR) control cachability. In these registers, the setting of the bit is reversed; 1 indicates that a 
storage control region is cachable, rather than caching inhibited. 


Note that the PowerPC Architecture does not support memory models in which write-through is 
enabled and caching is inhibited. It is considered a programming error to use these memory models; 
the results are undefined. 


It is considered a programming error if the target location of a load/store, debz, or fetch access to 
caching inhibited storage is in the cache; the results are undefined. It is not considered a 
programming error for the target locations of other cache control instructions to be in the cache when 
caching is inhibited. 
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M (memory coherent,1 bit) 


For implementations that support multiprocessing, the M storage attribute improves the performance 
of memory coherency management. Because the PPC405GP does not provide multi-processor 
support or hardware support for data coherency, the M bit is implemented, but has no effect. 


G (guarded,1 bit) 


When set (TLBLO[G] = 1), indicates that the hardware cannot speculatively access the location for 
pre-fetching or out-of-order load access. The G storage attribute is typically used to protect memory- 
mapped I/O from inadvertent access. Attempted execution of an instruction from a guarded data 
storage address while instruction address translation is enabled results in an instruction storage 
interrupt because data storage and memory mapped I/O (MMIO) addresses are not used to contain 
instructions. 


An instruction fetch from a guarded region does not occur until the execution pipeline is empty, thus 
guaranteeing that the access is necessary and therefore not speculative. For this reason, 
performance is degraded when executing out of guarded regions, and software should avoid 
unnecessarily marking regions of instruction storage as guarded. 


In real mode, the Storage Guarded Register (SGR) controls guarding. 
UO (user-defined attribute, 1 bit) 


When set (TLBLO[UO] = 1), indicates the user-defined attribute applies to the data in the associated 
page. This storage attribute controls CodePack decompression for a page. 


In real mode, the Storage User-defined 0 Register (SUOR) controls the setting of the UO storage 
- attribute. 


E (endian, 1 bit) 


When set (TLBLO[E] = 1), indicates that data in the associated page is stored in true little endian 
format. 


In real mode, the Storage Little-Endian Register (SLER) controls the setting of the E storage attribute. 


6.3.3 Shadow Instruction TLB 


To enhance performance, four instruction-side TLB entries are kept in a four-entry fully-associative 
shadow array. This array, called the instruction TLB (ITLB), helps to avoid TLB contention between 
instruction accesses to the TLB and load/store operations. Replacement and invalidation of the ITLB 
entries is managed by hardware (see “Shadow TLB Consistency” on page 6-8 for details). 


The ITLB can be considered a level-1 instruction-side TLB; the UTLB serves as the level-2 
instruction-side TLB. The ITLB is used only by instruction fetches for storing instruction address 
translations. Each ITLB entry contains the translation information for a page. The processor uses the 
ITLB for address translation of instruction accesses when MSRIIR] = 1. 


6.3.3.1 ITLB Accesses 


The instruction unit accesses the ITLB independently of the rest of the MMU. ITLB accesses are 
transparent to the executing program, except that ITLB hits contribute to higher.overall instruction 
throughput by allowing data address translations to occur in parallel. Therefore, when instruction 
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accesses hit in the ITLB, the address translation mechanisms in the UTLB are available for use by 
data accesses simultaneously. 


The ITLB requests a new entry from the UTLB when an ITLB miss occurs. A four-cycle latency occurs 
at each ITLB miss that is also a UTLB hit; the latency is longer if it is also a UTLB miss, or if there is 
contention for the UTLB from the data side. A round-robin replacement algorithm replaces existing 
entries with new entries. 


6.3.4 Shadow Data TLB 


To enhance performance, eight data-side TLB entries are kept in a eight-entry fully-associative 
shadow array. This array, called the data TLB (DTLB), helps to avoid TLB contention between 
instruction accesses to the TLB and load/store operations. Replacement and invalidation of the DTLB 
entries is managed by hardware. See “Shadow TLB Consistency” on page 6-8 for details. 


The DTLB can be considered a level-1 data-side TLB; the UTLB serves as the level-2 data-side TLB. 
The DTLB is used only by instructions in execute for storing data address translations. Each DTLB 
entry contains the translation information for a page. The processor uses the DTLB for address 
translation of data accesses when MSR[DR] = 1. 


6.3.4.1 DTLB Accesses 


The execute unit accesses the DTLB independently of the rest of the MMU. DTLB accesses are 
transparent to the executing program, except that DTLB hits contribute to higher overall instruction 
throughput by allowing instruction address translations to occur in parallel. Therefore, when data 
accesses hit in the DTLB, the address translation mechanisms in the UTLB are available for use by 
instruction accesses simultaneously. 


The DTLB requests a new entry from the UTLB when a DTLB miss occurs. A three-cycle latency 
occurs at each DTLB miss that is also a UTLB hit; the latency is longer if it is also a UTLB miss. If 
there is contention for the UTLB from the instruction side, the data side has priority. A round-robin 
replacement algorithm replaces existing entries with new entries. 
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‘Figure 6-3 illustrates the relationship of the shadow TLBs and UTLB in address translation: 


' Generate I-side Generate D-side 
Effective Address Effective Address 


Translation Disabled Translation Enabled Translation Enabled Translation Disabled 
(MSRI[IR]=0) % (MSR{[IR] = 1) (MSR[DR] = 1) % (MSR[DR] = 0) 


Perform ITLB Perform DTLB No Translation 
Look-up Look-up 


ITLB Hit | ITLB Miss DTLB Miss | DTLBHit 
O & 


Extract Real Perform UTLB Extract Real 
Address from ITLB Look-up Address from DTLB 


UTLB Hit UTLB Miss 


Continue I-cache Continue I-cache 
Access or D-cache 


Access 
O 


I-Side TLB Miss 
or 
D-Side TLB Miss 
Exception 


Extract Real 
Address from UTLB 


Route Address Route Address 
to ITLB to DTLB 
Figure 6-3. ITLB/DTLB/UTLB Address Resolution 


6.3.4.2 Shadow TLB Consistency 


The processor invalidates the entire ITLB contents when the following context-synchronizing events 
occur, to help to maintain ITLB integrity. 


e isync instruction 
e Processor context switch (all interrupts, rfi, rfci) 


6-8 PPC405GP User’s Manual | Preliminary 


lf software updates a translation/protection mechanism (UTLB, PID, ZPR, or MSR) and must 
synchronize these updates with the ITLB, the software must perform the necessary context 
synchronization. 


A typical example is the manipulation of the TLB by an operating system within an interrupt handler 
fora TLB miss. Upon entry to the interrupt handler, the ITLB is invalidated and translation is disabled. 
If the operating system simply made the TLB updates and returned from the handler (using rfi), no 
additional explicit software action would be required to synchronize the ITLB. 


If, instead, the operating system re-enables translation within the handler, and then performs TLB 
updates within the handler, those updates would not be effective in the ITLB until rfi is executed to 
return from the handler. For those TLB updates to be reflected in the ITLB within the handler, an 
isync must be issued after TLB updates finish. Failure to properly synchronize the ITLB can cause 
unexpected behavior. 


Programming Note: As a rule of thumb, follow software manipulation of an translation 
mechanism (if performed while translation is active) with a context-synchronizing operation 
(usually isync). 


6.4 TLB-Related Interrupts 
The processor relies on interrupt handling software to implement paged virtual memory, and to 
enforce protection of specified memory pages. 


When an interrupt occurs, the processor clears MSR[IR, DR]. Therefore, at the start of all interrupt 
handlers, the processor operates in real mode for instruction accesses and data accesses. Note that 
when address translation is disabled for an instruction fetch or load/store, the EA is equal to the real 
address and is passed directly to the memory subsystem (including cache units). Such untranslated 
addresses bypass all memory protection checks that would otherwise be performed by the MMU. 


When translation is enabled, MMU accesses can result in the following interrupts: 
¢ Data storage interrupt 

¢ Instruction storage interrupt 

¢ Data TLB miss interrupt 


¢ Instruction TLB miss interrupt 


6.4.1. Data Storage Interrupt 


A data storage interrupt is generated when data address translation is active, and the desired access 
to the EA is not permitted for one of the following reasons: 


¢ Inthe problem state 


— icbi, load/store, dcbz, or dcbf with an EA whose zone field is set to no access (ZPR[Zn] = 00). 
In this case, dcbt and debtst no-op, rather than cause an interrupt. Privileged instructions 
cannot cause data storage interrupts. 


— Stores, or dcbz, to an EA having TLB_entry[WR] = 0 (write access disabled) and ZPR[Zn] # 11. 
(The privileged instructions debi and dccci are treated as “stores”, but cause program 
interrupts, rather than data storage interrupts.) 
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¢ In supervisor state 


— Data store, debi, dcebz, or decci to an EA having TLB_entry[WR] = 0 and ZPR[Zn] other than 11 
or 10. 


dcba does not cause data storage exceptions. If conditions occur that would otherwise cause such an 
exception, dcba is treated as a no-op. . 


“Zone Protection” on page 6-13 describes zone protection in detail. See “Data Storage Interrupt” on 
page 10-36 for a detailed discussion of the data storage interrupt. 


6.4.2 Instruction Storage Interrupt 


An instruction storage interrupt is generated when instruction address translation is active and the 
processor attempts to execute an instruction at an EA for which fetch access is not permitted, for any 
of the following reasons: 


¢ Inthe problem state 


Instruction fetch from an EA with ZPR[Zn] = 00. 
Instruction fetch from an EA having TLB_entry[EX] = 0 and ZPR[Zn] # 11. 
Instruction fetch from an EA having TLB_entry[G] = 1. 


* In the supervisor state 


Instruction fetch from an EA having TLB_entry[EX] = 0 and ZPR[Zn] other than 11 or 10. 
Instruction fetch from an EA having TLB_entry[G] = 1. 


See “Zone Protection” on page 6-13 for a detailed discussion of zone protection. See “Instruction 
Storage Interrupt” on page 10-38 for a detailed discussion of the instruction storage interrupt. 


6.4.3. Data TLB Miss Interrupt 


A data TLB miss interrupt is generated if data address translation is enabled and a valid TLB entry 
matching the EA and PID is not present. The interrupt applies to data access instructions and cache 
operations (excluding cache touch instructions). 


See “Data TLB Miss Interrupt” on page 10-43 for a detailed discussion. 


6.4.4 Instruction TLB Miss Interrupt 


The instruction TLB miss interrupt is generated if instruction address translation is enabled and 
execution is attempted for an instruction for which a valid TLB entry matching the EA and PID for the 
instruction fetch is not present. 


See “Instruction TLB Miss Interrupt” on page 10-44 for a detailed discussion. 


6.5 TLB Management 


The processor does not imply any format for the page tables or the page table entries because there 
is no hardware support for page table management. Software has complete flexibility in implementing 
a replacement strategy, because software does the replacing. For example, software can “lock” TLB 
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entries that correspond to frequently used storage by electing to never replace them, so that those 
entries are never cast out of the TLB. 


TLB management is performed by software with some hardware assist, consisting of: 


¢ Storage of the missed EA in the Save/Restore Register 0 (SRRO) for an instruction-side miss, or in 
the Data Exception Address Register (DEAR) for a data-side miss. 


e Instructions for reading, writing, searching, and invalidating the TLB, as described briefly in the 
following subsections. See Chapter 24, “Instruction Set,” for detailed instruction descriptions. 


6.5.1. TLB Search Instructions (tlbsx/tlbsx.) 


tlbsx locates entries in the TLB, to find the TLB entry associated with an interrupt, or to locate 
candidate entries to cast out. tlbsx searches the UTLB array for a matching entry. The EA is the value 
to be matched; EA = (RAIO)+(RB). 


If the TLB entry is found, its index is placed in RT9¢-31. RT can then serve as the source register for a 
tibre or tlbwe instruction to read or write the entry, respectively. If no match is found, the contents of 
RT are undefined. 


tlbsx. sets the Condition Register (CR) bit CROcg. The value of CROgg depends on whether an entry 
is found: CROgg = 1 if an entry is found; CROgg = 0 if no entry is found. 

6.5.2 TLB Read/Write Instructions (tlbre/tibwe) . 

TLB entries can be accessed for reading and writing by tlbre and tlbwe, respectively. Separate 
extended mnemonics are available for the TLBHI (tag) and TLBLO (data) portions of a TLB entry. 
6.5.3 TLB Invalidate Instruction (tlbia) 

tibia sets TLB_entry[V] = 0 to invalidate all TLB entries. All other TLB entry fields remain unchanged. 
Using tlbwe to set TLB_entry[V] = 0 invalidates a specific TLB entry. 


6.5.4 TLB Sync Instruction (tlbsync) 


tlbsync guarantees that all TLB operations have completed for all processors in a multi-processor 
system. PPC405GP provides no multiprocessor support, so this instruction performs no function. The 
instruction is included to facilitate code portability. 


6.6 Recording Page References and Changes 


When system software manages virtual memory, the software views physical memory as a collection 
of pages. Each page is associated with at least one TLB entry. To manage memory effectively, system 
software often must know whether a particular page has been referenced or modified. Note that this 
involves more than knowing whether a particular TLB entry was used to reference or alter memory, 
because multiple TLB entries can translate to the same page. 


When system software manages a demand-paged environment, and the software needs to replace 
the contents of a page with other data, previously referenced pages (accessed for any purpose) are 
more likely to be maintained than pages that were never referenced. If the contents of a page must be 
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replaced, and data contained in that page was modified, system software generally must write the 
contents of the modified page to the backing store before replacing its contents. System software 
must maintain records to control the environment. 


Similarly, when system software manages TLB entries, the software often must know whether a 
particular TLB entry was referenced. When the system software must select a TLB entry to cast out, 
previously referenced entries are more likely to be maintained than entries which were never 
referenced. System software must also maintain records for this purpose. 


The PPC405GP does not provide hardware reference or change bits, but TLB miss interrupts and 
data storage interrupts enable system software to maintain reference information for a entries and 
their associated pages, respectively. 


A possible algorithm follows. First, the TLB entries are built, with each TLB_entry[V, WR] = 0. System 
software retains the index and EPN of each entry. 


The first attempt by application code to access a page causes a TLB miss interrupt, because its TLB 
entry is marked invalid. The TLB miss handler records the reference to the TLB entry (and to the 
associated page) in a data structure, then sets TLB_entry[V] = 1. (Note that TLB_entry[V] can be 
considered a reference bit for the TLB entry.) Subsequent read accesses to the page associated with 
the TLB entry proceed normally. 


In the example just given for recording TLB entry references, the first write access to the page using 
the TLB entry, after the entry is made valid, causes a data storage interrupt because write access was 
turned off. The TLB miss handler records the write to the page in a data structure, for use asa 
“changed” flag, then sets TLB_entry[WR] = 1 to enable write access. (Note that TLB_entry[WR] can 
be considered a change bit for the page.) Subsequent write accesses to the page proceed normally. 


6.7 Access Protection 


The PPC405GP provides virtual-mode access protection. The TLB entry enables system software to 
control general access for programs in the problem state, and control write and execute permissions 
for all pages. The TLB entry can specify zone protection that can override the other access control 
mechanisms supported in the TLB entries. . 


TLB entry and zone protection methods also support access controls for cache operation and string 
loads/stores. 


6.7.1 Access Protection Mechanisms in the TLB 


For MMU access protection to be in effect, one or both of MSR[IR] or MSR[DR] must be set to one to 
enable address translation. MSR[IR] enables protection on instruction fetches, which are inherently 
read-only. MSR[DR] enables protection on data accesses (loads/stores). 


6.7.1.1 General Access Protection 


The translation ID (TLB_entry[TID]) provides the first level of MMU access protection. This 8-bit field, 
if non-zero, is compared to the contents of TLB_entry[PID]. These fields must match in a valid TLB 
entry if any access is to be allowed. In typical use, it is assumed that a program in the supervisor 
state, such as a real-time operating system, sets the PID before starting a problem state program that 
is subject to access control. 
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lf TLB_entry[TID] = 0x00, the associated memory page is accessible to all programs, regardless of 
their PID. This enables multiple processes to share common code and data. The common area is still 
subject to all other access protection mechanisms. Figure 6-4 illustrates the PID. 


Figure 6-4. Process ID (PID) 


rom [Renee SSC~*Y 
peeet | [Pomes 


6.7.1.2 Execute Permissions 


if instruction address translation is enabled, instruction fetches are subject to MMU translation and 
have MMU access protection. Fetches are inherently read-only, so write protection is not needed. 
Instead, using TLB_entry[EX], a memory page is marked as executable (contains instructions) or not 
executable (contains only data or memory-mapped control hardware). 


If an instruction is pre-fetched from a memory page for which TLB_entry[EX] = 0, the instruction is 
tagged as an error. lf the processor subsequently attempts to execute this instruction, an instruction 
storage interrupt results. This interrupt is precise with respect to the attempted execution. If the 
fetcher discards the instruction without attempting to execute it, no interrupt will result. 


Zone protection can alter execution protection. 


6.7.1.3 Write Permissions 


lf MSR[DR] = 1, data loads and stores are subject to MMU translation and are afforded MMU access 
protection. The existence of a TLB entry describing a memory page implies read access; write access 
is controlled by TLB_entry[WR]. 


lf a store (including those caused by debz, debi, or dccci) is made to an EA having 
TLB_entry[WR] = 0, a data storage interrupt results. This interrupt is precise. 


Zone protection can alter write protection (see “Zone Protection” on page 6-13). In addition, only zone 
protection can prevent read access of a page defined by a TLB entry. 


6.7.1.4 Zone Protection 


Each TLB entry contains a 4-bit zone select (ZSEL) field. A zone is an arbitrary identifier for grouping 
TLB entries (memory pages) for purposes of protection. As many as 16 different zones may be 
defined. Any zone can have any number of member pages. 


Each zone is associated with a 2-bit field (ZO-Z15) in the ZPR. The values of the field define how 
protection is applied to all pages that are member of that zone. Changing the value of the ZPR field 
can alter the protection attributes of all pages in the zone. Without ZPR, the change would require 
finding, reading, altering, and rewriting the TLB entry for each page in a zone, individually. The ZPR 
provides a much faster means of altering the protection for groups of memory pages. 
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The ZSEL values 0-15 select ZPR fields ZO-Z15, respectively. 
The fields are defined within the ZPR as follows: 


While it is common for TLB_entry[EX, WR] to be identical for all member pages in a group, this is not 
required. The ZPR field alters the protection defined by TLB_entry[EX] and TLB_entry[WR], on a 
page-by-page basis, as shown in the ZPR illustration. An application program (presumed to be 
running in the problem state) can have execute and write permissions as defined by TLB_entry[EX] 
and TLB_entry[WR] for the individual pages, or no access (denies loads, as well as stores and 
execution), or complete access. 


Z0 Z2 Z4 Z6 Z8 Z10 212 Z14 


[o 1[2 Sa 5/6 7[8 B[10 1112 13]14 Tle 17] 18 19]0 2122 2B[a4 25[6 27]28 29/0 BT] 
‘ZI 23 25 27 Z9 211 Z13 Z15 


Figure 6-5. Zone Protection Register (ZPR) 


TLB page access control for all pages in this zone. 


In the problem state (MSR[PR] = 1): 

00 No access 

01 Access controlled by applicable 
TLB_entry[EX, WR] 

10 Access controlled by applicable 
TLB_entry[EX, WR] 

11 Accessed as if execute and write 
permissions (TLB_entry[EX, WR]) are 
granted. : 


In the supervisor state (MSR[PR] = 0): 

00 Access controlled by applicable 
TLB_entry[EX, WR] 

01 Access controlled by applicable 
TLB_entry[EX, WR] 

10 Access controlled by applicable 
TLB_entry[EX, WR] 

11 Accessed as if execute and write 
permissions (TLB_entry[EX, WR}) are 


0:1 ZO 
ii granted. 
| 
[88 [2 | Seethedeseipton fT 
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30:31 See the description of ZO. 


Setting ZPR[Zn] = 00 for a ZPR field is the only way to deny read access to a page defined by an 
otherwise valid TLB entry. TLB_entry[EX] and TLB_entry[WR] do not support read protection. Note 
that the icbi instruction is considered a load with respect to access protection; executed in user 
mode, it causes a data storage interrupt if MSR[DR] = 1 and ZPR[Zn] = 00 is associated with the EA. 


For a given ZPR field value, a program in supervisor state always has equal or greater access than a 
program in the problem state. System software can never be denied read (load) access for a valid 
TLB entry. 


6.7.2 Access Protection for Cache Control Instructions 


Architecturally the instructions dcba, debi, and dcbz are treated as “stores” because they can 
change data, or cause loss of data by invalidating a dirty line (a modified cache block). 


Table 6-2 summarizes the conditions under which the cache control instructions can cause data 
storage interrupts. 


Table 6-2. Protection Applied to Cache Control Instructions 


Possible Data Storage interrupt 
When ZPR[Zn] =00 | When TLB_entry[WR] = 0 
Eee IG No —— no-ops) | No (instruction no-ops) 


No (instruction no-ops) 
No a no-ops) 


If data address translation is enabled, and write permission is denied (TLB_entry[WR] = 0), debi and 
dcbz can cause data storage interrupts. dcbz can cause a data storage interrupt when executed in 
the problem state and all access is denied (ZPR[Zn] = 00); dcbi cannot cause a data storage interrupt 
because it is a privileged instruction. 


The deba instruction enables “speculative” line establishment in the cache arrays; the established 
lines do not cause a line fill. Because the effects of dcba are speculative, interrupts that would 
otherwise result when ZPR[Zn] = 00 or TLB_entry[WR] = 0 do not occur. In such cases, dcba is 
treated as a no-op. 
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The dccci instruction can also be considered a “store” because it can change data by invalidating a 
dirty line; however, dccci is not address-specific (it affects an entire congruence class regardless of 
the operand address of the instruction). To restrict possible damage from an instruction which can 
change data and yet avoids the protection mechanism, the dcecci instruction is privileged. 


If data address translation is enabled, dccci can cause data storage interrupts when 
TLB_entry[WR] = 0; the operand is treated as if it were address-specific. dccci cannot cause a data 
storage interrupt when ZPR[Zn] = 00, because it is a privileged instruction. 


Because dccci can cause data storage and TLB -miss interrupts, use of decci is not recommended 
when MSR[DR] = 1; if decci is used. Note that the specific operand address can cause an interrupt. 


Architecturally, dcbt and debtst are treated as “loads” because they do not change data; they cannot 
cause data storage interrupts when TLB_entry[WR] = 0. 


The cache block touch instructions debt and debtst are considered “speculative” loads; therefore, if a 
data storage interrupt would otherwise result from the execution of debt or dcbtst when 

ZPR[Zn] = 00, the instruction is treated as a no-op and the interrupt does not occur. Similarly, TLB 
miss interrupts do not occur for these instructions. 


Architecturally, dcbf and dcebst are treated as “loads”. Flushing or storing a line from the cache is not 
architecturally considered a “store” because a store was performed to update the cache, and debf or 
dcbst only update main memory. Therefore, neither dcbf nor dcbst can cause data storage 
interrupts when TLB_entry[WR] = 0. Because neither instruction is privileged, they can cause data 
storage interrupts when ZPR[Zn] = 00 and data address translation is enabled. 


dcread is a “load” from a non-specific address, and is privileged. Therefore, it cannot cause data 
storage interrupts when ZPR[Zn] = 00 or TLB_entry[WR] = 0. 


icbi and icbt are considered “loads” and cannot cause data storage interrupts when 
TLB_entry[WR] = 0. icbi can cause data storage interrupts when ZPR[Zn] = 00. Because icbt is 
privileged, it cannot cause data storage interrupts when ZPR[Znj = 00. 


The iccci instruction cannot change data; an instruction cache line cannot be dirty. The iccci 
instruction is privileged and is considered a load. It does not cause data storage interrupts when 
ZPR[Zn] = 00 or TLB_entry[WR] = 0. 


Because iccci can cause a TLB miss interrupt, using iccci is not recommended when data address 
translation is enabled; if it is used, note that the specific operand address can cause an interrupt. 


icread is considered a “load” from a non-specific address, and is privileged. Therefore, it cannot 
cause data storage interrupts when ZPR[Zn] = 00 or TLB_entry[WR] = 0. 

6.7.3 Access Protection for String Instructions 

The stswx instruction with string length equal to O(XER[TBC] = 0) is a no-op. 


When data address translation is enabled and the Transfer Byte Count (TBC) field of the Fixed Point 
Exception Register (XER) is 0, neither Iswx nor stswx can cause TLB miss interrupts, or data storage 
. interrupts when ZPR[Zn] = 0 or TLB_entry[WR] = 0. 
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6.8 Real-mode Storage Attribute Control 


The PowerPC Architecture and the PowerPC Embedded Environment define several SPRs to control 
the following storage attributes in real mode: W, |, G,UO, and E. Note that the UO and E attributes are 
not defined in the PowerPC Architecture. The E attribute is defined in the IBM PowerPC Embedded 
Environment, and the U0 attribute is implementation-specific. No storage attribute control register is 
implemented for the M storage attribute because the PPC405GP does not provide multi-processor 
support or hardware support for data coherency. 


These SPRs, called storage attribute control registers, control the various storage attributes when 
address translation is disabled. When address translation is enabled, these registers are ignored, and 
the storage attributes supplied by the TLB entry are used (see “TLB Fields” on page 6-3). 


The storage attribute control registers divide the 4GB real address space into thirty-two 128MB 
regions. In a storage attribute control register, bit O controls the lowest addressed 128MB region, bit 1 
the next higher-addressed 128MB region, and so on. EAo.4 specify a storage control region. 


For detailed information on the function of the storage attributes, see “Storage Attribute Fields” on 
page 6-5. 
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6.8.1 Storage Attribute Control Registers 


Figure 6-6 shows a generic storage attribute control register. The storage attribute control registers 
have the same bit numbering and address ranges. 


[Of 1] 2] 3] 4] 5] 6] 7] 8] 9] 10] 47] 12] 13] 14) 15] 16] 17] 18] 19] 20] 21/22] 23] 24) 25] 26]27|28] 2930/31) 


Figure 6-6. Generic Storage Attribute Control! Register 


Address Range | Bit | Address Range 
| 


0x0000 0000-0x07FF FFFF 0x8000 0000-0x87FF FFFF 
1 | 0x0800 0000-OxOFFF FFFF | 17 | 0x8800 0000-0x8FFF FFFF 
0x1000 0000—0x17FF FFFF 0x9000 0000-—0x97FF FFFF 
3 | 0x1800 0000-0x1FFF FFFF 0x9800 0000 -Ox9FFF FFFF 
4 | 0x2000 0000-0x27FF FFFF 0xA000 0000-0xA7FF FFFF 
0x2800 0000—-0x2FFF FFFF 0xA800 0000 -OxAFFF FFFF 
0x3000 0000-0x37FF FFFF 0xB000 0000-0xB7FF FFFF 
7 | 0x3800 0000-0x3FFF FFFF 0xB800 0000-0xBFFF FFFF 
0x4000 0000—0x47FF FFFF 0xC000 0000-0xC7FF FFFF 
0x4800 0000-0x4FFF FFFF 0xC800 0000 -OxCFFF FFFF 


od 000-DrF FFRE [28 | O00 O000-DETEF FFF 


0x7800 0000-0x7FFF FFFF OxF800 0000-—OxFFFF FFFF 


10 
11 
12 
13 
14 

5 


1 


6.8.1.1 Data Cache Write-through Register (DCWR) 


The DCWR controls write-through policy (the W storage attribute) for the data cache unit (DCU). 
Write-through is not applicable to the instruction cache unit (ICU). 


After any reset, all DCWR bits are set to 0, which establishes a write-back write strategy for all 
regions. 


The PowerPC Architecture does not support memory models in which write-through is enabled and 
caching is inhibited. 
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6.8.1.2 Data Cache Cachability Register (DCCR) 


The DCCR controls the | storage attribute for data accesses and cache management instructions. 
Note that the polarity of the bits in this register is opposite to that of the | attribute in the TLB; 
DCCR[Spr] = 1 enables caching, while TLB_entry[l] = 1 inhibits caching. 


Aiter any reset, all DCCR bits are set to 0. No memory regions are cachable. Before memory regions 
can be designated as cachable in the DCCR, it is necessary to execute the decci instruction once for 
each congruence class in the DCU cache array. This procedure invalidates all congruence classes. 
The DCCR can then be reconfigured, and the DCU can begin normal operation. 


The PowerPC Architecture does not support memory models in which write-through is enabled and 
caching is inhibited. = 
6.8.1.3 Instruction Cache Cachability Register (ICCR) 


The ICCR controls the | storage attribute for instruction fetches. Note that the polarity of the bits in this 
register is opposite of that of the | attribute (ICCR[Sn] = 1 enables caching, while TLB_entry([I] = 1 
inhibits caching). 


After any reset, all [CCR bits are set to 0. No memory regions are cachable. Before memory regions 
can be designated as cachable in the ICCR, it is necessary to execute the iccci instruction. This 
invalidates all congruence classes. The ICCR can then be reconfigured, and the ICU can begin 
normal operation. 


6.8.1.4 Storage Guarded Register (SGR) 
The SGR controls the G storage attribute for instruction and data accesses. 


This attribute does not affect data accesses; the PPC405GP does not perform speculative loads or 
stores. 


After any reset, all SGR bits are set to 1, marking all storage as guarded. For best performance, 
system software should clear the guarded attribute of appropriate regions as soon as possible. If 
MSR(IR] = 1, the G attribute comes from the TLB entry. Attempting to execute from a guarded region 
in translate mode causes an instruction storage interrupt. See “Instruction Storage Interrupt” on 
page 10-38 for more information. 


6.8.1.5 Storage User-defined 0 Register (SUOR) 


The Storage User-defined 0 Register (SUOR) controls the user-defined (U0) storage attribute for 
instruction and data accesses. 


After any reset, all SUOR bits are set to 0. 


6.8.1.6 Storage Little-Endian Register (SLER) 
The SLER controls the E storage attribute for instruction and data accesses. 


This attribute determines the byte ordering of storage. “Byte Ordering” on page 3-28 provides a 
detailed description of byte ordering in the IBM PowerPC Embedded Environment. 


After any reset, all SLER bits are set to 0 (big endian). 
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Part Ill. PPC405GP System Operations 
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Chapter 7. Clocking 


Clocking in the PPC405GP is highly configurable and supports a wide range of clock ratios on the 
internal and external buses. 


Figure 7-1 illustrates the clocking options for the PPC405GP. A phase-locked loop (PLL) is the source 
for the CPU clock. Generated clock frequencies are integer ratios of this reference clock. Optional 
external clock inputs are shown where appropriate. The clocking inputs, which are highlighted in the 
figure (IICSCL is I/O), are described in more detail in Chapter 26, “Signal Summary.” 


Clock Generation/Divides 


SysClk 


PCICIk ———-e 


PerClk 


2-5 
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| 
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Serial Clock 
UART 


| 
| 
UARTSerCIk ——e | 
| 
| 
| 


Tuning Bits 


Figure 7-1. PPC405GP Clocking 


7.1. PLL Overview 


The PLL VppA input to the PPC405GP requires 2.5 V + 0.2 V, which should be supplied from a 2.5 V 
filtered board voltage. 


The PLL operating range is controlled by forward divide and feedback divide ratios, tuning bits, and 
SysClk. The voltage controlled oscillator (VCO) in the PLL must operate at a range of 400-800 MHz. 
The value of the forward divide and feedback divide ratios affects the CPU frequency and the VCO 
operating frequency. 
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Several strapping values are required to correctly configure the PPC405GP. When setting the values, 
pay close attention to the following information to avoid accidentally configuring the controller in an 
unusable state. 


For any acceptable SysClk input, the VCO frequency is set by the feedback and forward dividers, and 
the CPU to PLB divider, as shown in the following equation: 


VCO = Reference Clock x M 
where M = Feedback Divide x Forward Divide x CPU to PLB Divide 


For example, with an input reference frequency of 33.33 MHz, feedback divider of 3, CPU to PLB 
divider of 2, and forward divider of 3, the VCO frequency at which the PLL stabilizes is 600 MHz. 


Strap selection for PLL tuning depends upon the value of M, which can range from 6 to 32. The upper 
limit is based on a minimum input reference clock frequency of 25 MHz and a maximum VCO 
frequency of 800 MHz. The lower limit is based on a maximum input reference clock of 66 MHz and a 
minimum VCO frequency of 400MHz. M decreases as the reference clock frequency increases. 


7.2 Input Reference Clock (SysClk) 


The input reference clock, SysClk, must be between 25 MHz and 66 MHz for the PLL to achieve a 
stable lock. Input clocks outside this range are not supported. When synchronous PCI mode is 
selected, clock generation logic ensures that the internally generated PCI clock and SysClk are 
phase-aligned. This means that rising edges will coincide as long as the frequencies are the same. In 
most cases, the input reference clock is expected to be the same as the PCI clock provided to other 
PCI devices outside of the 405GP. Therefore, the phase alignment that automatically occurs ensures 
that the internally generated PCI clock matches the clock used by other PCI devices. 


Clock generation logic also ensures that the internally generated peripheral clock (PerClk) is phase- 
aligned with SysClk, as long as both run at the same clock frequency. This is useful when an external 
device, such as an external master, cannot be synchronized with the PPC405GP PerClk. 
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7.3. External Clock Strapping Setup 


The PPC405GP configures its clocking based on strapping resistors connected to module I/O pins. 
The state of the strapping pins is stored in the Chip Pin Strapping Register (CPCO_PSR) upon power- 
on or system reset. Software can use this read-only register to determine clock strapping values. 
Table 7-1 indicates which CPCO_PSR fields are assigned to clocking functions and how they are 
encoded. See Chapter 9, “Pin Strapping and Sharing” for a more information and a complete list of 


strapping values. 


Table 7-1. Clock Strapping Values 


PLL Forward Divide Ratio 
CPCO_PSR[PFWD] 

00 Bypass mode 

01 Divide by 3 

10 Divide by 4 

11 Divide by 6 


PLL Feedback Divide Ratio 
CPCO_PSR[PFBD] 

00 Divide by 1 

01 Divide by 2 

10 Divide by 3 

11 Divide by 4 


PLL Tuning 

CPCO_PSRI[PT] 

000 Choice 1; TUNE[5:0] = 010001 
001 Choice 2; TUNE[5:0] = 010010 
010 Choice 3; TUNE[5:0] = 010011 
011 Choice 4; TUNE[5:0] = 010100 
100 Choice 5; TUNE[5:0] = 010101 
101 Choice 6; TUNE[5:0] = 010110 
110 Choice 7; TUNE[5:0] = 010111 
111 Choice 8; TUNE[5:0] = 100100 


PLB Divide Ratio from CPU 
CPCO_PSR[PDC] 

00 Divide by 1 

01 Divide by 2 

10 Divide by 3 

11 Divide by 4 


OPB Divide Ratio from PLB 
CPCO_PSR[ODP] 

00 Divide by 1 

01 Divide by 2 

10 Divide by 3 

11 Divide by 4 


Preliminary 


These bits indicate bypass mode or one of three valid PLL 
forward divide ratios. 

Bypass mode is useful when the PPC405GP is run with a low- 
frequency reference clock input that is too low for the PLL to 
lock. For example, if the PPC405GP is clocked at 1 MHz in an 
emulation system, the PLL cannot be used and should be 
placed in bypass mode. 

The other three strapping combinations select one of three valid 
PLL forward divide ratios: 3, 4, or 6. These ratios are the only 
acceptable ratios. 


These bits indicate one of four valid PLL feedback divide ratios: 
1,2,3,or4. : 


Note: The tune bits adjust parameters that control PLL jitter. 
The recommended values minimize jitter for the PLL 
implemented in the PPC405GP. These bits are shown for 
information only, and do not require modification except in 
special clocking circumstances, such as spread spectrum 
clocking. For details on the use of spread spectrum clock 
generators (SSCGs) with the PPC405GP, visit the 
technical documents area of the IBM PowerPC web site. 


These bits indicate one of four PLB divide ratios from the CPU: 
1, 2, 3, or 4. 


These bits indicate one of four OPB divide ratios from the PLB: 
1, 2, 3, or 4. 
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Table 7-1. Clock Strapping Values (continued) 


PCI Divide Ratio from PLB These bits indicate one of four PCI divide ratios from the PLB: 1, 
CPCO_PSR[PDP] 2, 3 0r 4. 
00 Divide by 1 
01 Divide by 2 
10 Divide by 3 
11 Divide by 4 


Peripheral Bus Divide Ratio from PLB 
CPCO_PSR[EBDP] 
00 Divide by 2 
01 Divide by 3 
10 Divide by 4 
11 Divide by 5 


These bits indicate one of four peripheral bus divide ratios from 
the PLB: 2, 3, 4, or 5. 


Table 7-2 lists PLL tuning settings, which are controlled by the pin strappings reported by 
CPCO_PSR[PT]. The tune bits adjust parameters that contro! PLL jitter. The recommended values 
minimize jitter for the PLL implemented in the PPC405GP. These bits are shown for information only, 
and do not require modification except in special clocking circumstances, such as spread spectrum 
clocking. For details on the use of spread spectrum clock generators (SSCGs) with the PPC405GP, 
visit the technical documents area of the IBM PowerPC web site. 


Table 7-2. PLL Tuning Settings 


: 
remeve [| BSC~sSC“C*~‘“~sOSSCSC*‘“dRSC‘“‘i ONO 
fesmsxe [6 «dS SC*dCSSCTOTTO 


7.4 Sample Clock Ratios 


Table 7-3, Table 7-4, and Table 7-5 list all usable clocking ratio combinations that can be achieved 
using the strapping inputs for three different reference clock frequencies. VCO frequencies and M 
multipliers are calculated for each valid combination of forward divide (FWD), CPU to PLB divide 
(CPU/PLB), and feedback divide (FBK). The resulting clock frequencies for CPU and PLB are also 
shown. To simplify the table, PCI, OPB, external bus, and serial clock frequencies are not shown. 


Ratios that result in unusable configurations are not listed. In some cases, the table indicates identical 
CPU and PLB frequencies. However, in such cases, the VCO frequency varies. When the table 


indicates a choice of VCO frequencies, select the highest frequency in the range of 400-800 MHz for 
best PLL performance. 
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Table 7-3. Possible Clocking Ratios for Reference Clock of 33.3MHz 
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Note 1: x= aon care, 


Note 2: By-pass mode is for hardware emulator use only. Contact your IBM 
representative for more information. 


Note 3: Not ali PPC405GP parts support the frequencies shown. Check 
PPC405GP Datasheet for supported CPU and PLB frequencies for 
a specific part number. 
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Table 7-4. Possible Clocking Ratios for Reference Clock of 25MHz 


Strapping Options Calculated Values (MHz) 
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Note 1: x = don't care. 


Note 2: By-pass mode is designed for hardware emulator use only. 
Contact your IBM representative for more information. 


Note 3: Not all PPC405GP parts support the frequencies shown. Check 
PPC405GP Datasheet for supported CPU and PLB frequencies for 
a specific part number. 
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Table 7-5. Possible Clocking Ratios for Reference Clock of 41.6MHz 


[wo [CPUPLB] FBK [veo erUT FL | 
La 

a 
ee 
a a 


< 


Note 1: x = don’t care. 


Note 2: By-pass mode is designed for hardware emulator use only. 
Contact your IBM representative for more information. 


Note 3: Not all PPC405GP parts support the frequencies shown. Check 


PPC405GP Datasheet for supported CPU and PLB frequencies for 
a specific part number. 


7.5 PCI Clocking 


The PPC405GP PCI interface can run synchronously or asynchronously relative to the on-chip PLB. 
The state at reset of the PCI Asynchronous Mode Enable (PAME) strapping pin selects synchronous 
PCl mode or asynchronous PCI mode. The state of the PAME pin is reported in the PAME field of the 
CPCO_PSR. For information about the strapping pins, refer to PowerPC 405GP Embedded 
Processor Data Sheet , which is available from your IBM representative and in the Technical Library 
on the IBM Microelectronics web site (www.chips.ibm.com). 


Lower PCI latency through the PCI logic occurs in synchronous PCI mode, which should be used for 
host-bridge applications in which the PCI bus frequency is less than or equal to 33 Mhz, and the PLB 
frequency is an integer multiple of the PCI frequency. PPC405GP applications for higher PCI 
frequencies, or for PC! adapters, should use asynchronous PCI mode. 
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7.5.1 PCI Clocks 
The following clocks are related to the PCI logic: 


¢ The on-chip PLB clock 
¢ The on-chip synchronous PCI clock 
¢ Anexternal asynchronous PCI clock, PCICIk 


In synchronous PCI mode, the asynchronous PCI clock input is ignored and the on-chip PCI logic 
runs synchronously at the selected PLB:PCI divide ratio. In synchronous mode, the derived PCI clock 
must equal SysClk. 


In asynchronous PCI mode, the asynchronous PCI clock attaches to logic that interfaces with the PCI 
bus. The synchronous clock must always be provided to the PCI logic, even when the asynchronous 
PCI clock is used. Table 7-6 describes the relationships between the synchronous PCI clock, the 
asynchronous PCI clock, and the PLB clock. 


In asynchronous PCI mode, the synchronous PCI clock must meet certain requirements. The 
following equation describes the relationship that must be maintained between the asynchronous PCl 
clock and synchronous PCI clock. Select an appropriate PCI:PLB ratio to maintain the relationship: 


AsyncPClclock < SyncPClclock < ((2 x AsynePCliclock) + 1 MHz) 


Table 7-6 lists supported and commonly used combinations of synchronous and asynchronous PCI 
clocks. In general, higher synchronous PCI clock frequencies provides better performance, while 
lower synchronous PCI clock frequencies minimize power consumption. 


Table 7-6. Example Synchronous PCI Clock Frequencies in Asynchronous Mode 


PetFremeney |PetFreqeney PLS Freauenoy| at 

PCI Frequency | PCI Frequency | PLB Frequency Ratio 

20 Wiz 
[sowie | toowHe [12 
paiemne [ esaMe [12 


7.5.2 PCI Adapter Applications 


Because various systems run PCI expansion buses at different PCI frequencies, several PCi clock 
frequencies may need to be supported when the PPC405GP is used in PCI! adapters. Using the PCI 
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clock as a PPC405GP system clock input, as required for synchronous PCI mode, can adversely 
affect PPC405GP CPU performance. In some cases, the PPC405GP might not function. 


For example, if the PPC405GP is used on a PCI adapter and the PCI expansion bus frequency is 
33MHz, the PPC405GP strapping pins can be configured to run the chip at 200 MHz. However, if the 
same strapping configuration is used and the PPC405GP is used in a system in which the PCI 
expansion bus frequency is 25 MHZ (an application supported by the PCI specification), the 
PPC405GP would run suboptimally at 150 MHz. Worse problems would be encountered if the PCI 
frequency were less than 25 Mhz (the PPC405GP PLL locking frequency). In this application, the 

_ PPC405GP might not function. For these reasons, asynchronous PCI mode is recommended when 
the PPC405GP is used in PCI adapter applications. 


Asynchronous PCI mode uses an externally provided PCI clock that does not interact with an on-chip 
PLL, so there is no lower frequency limit imposed by loss of PLL lock. However, the requirements 
resulting from the relationship between the synchronous and asynchronous PCI clocks must still be 
satisfied. 


Note: Satisfying the equation in “PCI Clocks” on page 7-8 presents a potential problem. The 
strapping pin selection needed to set an acceptable synchronous PCI clock for a 33 MHz 
asynchronous PCI clock differs from the strapping pin selection for a 66 MHz asynchronous 
PCI clock. External logic is required to detect the state of the M66 pin on the PCI adapter 
interface and select appropriate PPC405GP strapping pins during system reset. 


7.6 Serial Port Clocking 


The two PPC405GP UARTs (serial ports) can be clocked individually, either from an external serial 
clock or from an internally generated serial clock. The internally generated clock is derived from the 
CPU clock, and is CPU/n, where n ranges from 1 to 32. The divisor nis programmed by setting a 
value of 0 to 31 in CPCO_CRO[UDIV] (see “Chip Control Register 0 (CPCO_CRO)” on page 7-11). 
Subsequently, the serial clock input to the UART is further divided in the UART to generate the 
desired serial data rate (baud rate). 


Refer to Chapter 21, “Serial Port Operations,” for more information about choosing CPU clock and 
serial input clock divisors. 


7.7 Clocking Registers 


Table 7-7 summarizes the Device Control Registers (DCRs) that control clocking in the PPC405GP. 


Table 7-7. Clocking Control Registers 


[Resists] Aaaress [RW] Con 


CPCO_PLLMR Ox0BO | R/O | PLL Mode Register 
CPCO_CRO Ox0B1 Chip Control Register 0 


CPCO_CRO selects the internal serial clock source. The clocking registers are read and written using 
the mtder and mfder instructions. 
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7.7.1. -PLL Mode Register (CPCO_PLLMR) 
The read-only CPCO_PLLMR contains a number of PLL and clock divisor values. 
CPCO_PLLMR fields are based on the external strapping options. 


The CPCO_PLLMR is big endian. However, values returned for the CPCO_PLLMR[FWDV, FBDV, 
TUN] fields are little endian to enable easier comparison of these bits with the PLL documentation in 
ASIC SA-12E Databook (available from your IBM representative), which uses little endian formats. 


FWDV TUN OPDV EPDV 


C 


DV PPDV 


Figure 7-2. PLL Mode Register (CPCO_PLLMR) 


0:2 FWDV Forward Divisor PLLOUTA Value: 
000 Forward divisor is 8. 50 MHz—100 MHz 
001 Forward divisor is 7. 58 MHz—114 MHz 
010 Forward divisor is 6. 66 MHz—134 MHz 
011 Forward divisor is 5. 80 MHz-160 MHz 
100 Forward divisor is 4. 100 MHz—200 MHz 
101 Forward divisor is 3. 133 MHz-267 MHz 
110 Forward divisor is 2. 200 MHz-400 MHz 
111 Forward divisor is 1. 400 MHz-800 MHz 

Note: PLLOUTA is the CPU clock in 
PPC405GP. 


Feedback Divisor 

0000 Feedback divisor is 16. 
0001 Feedback divisor is 1. 
0010 Feedback divisor is 2. 
0011 Feedback divisor is 3. 
0100 Feedback divisor is 4. 
0101 Feedback divisor is 5. 
0110 Feedback divisor is 6. 
0111 Feedback divisor is 7. 
1000 Feedback divisor is 8. 
1001 Feedback divisor is 9. 
1010 Feedback divisor is 10. 
1011 Feedback divisor is 11. 
1100 Feedback divisor is 12. 
1101 Feedback divisor is 13. 
1110 Feedback divisor is 14. 
1111 Feedback divisor is 15. 
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documents area of the IBM 


TUN TUNE[5:0] Field Note: The tune bits adjust parameters that 
contro! PLL jitter. The recommended 
values minimize jitter for the PLL 
implemented in the PPC405GP. 
These bits are shown for information 

only, and do not require modification 
except in special clocking 
circumstances, such as spread 
spectrum clocking. For details on the 
use of spread spectrum clock 
generators (SSCGs) with the 
PPC405GP, visit the technical 
PowerPC web site. 


13:14 | CBDV | CPU:PLB Frequency Divisor 
00 CPU:PLB divisor is 1 
01 CPU:PLB divisor is 2 
10 CPU:PLB divisor is 3 
11 CPU:PLB divisor is 4 
15:16 | OPDV | OPB-PLB Frequency Divisor 
00 OPB—PLB divisor is 1 
01 OPB-PLB divisor is 2 
10 OPB-PLB divisor is 3 
11 OPB-PLB divisor is 4 
17:18 | PPDV_ | PCI-PLB Frequency Divisor See “PCI Clocks” on page 7-8 for details 
00 PCI-PLB divisor is 1 regarding asynchronous PCI clocking and 
01 PCI-PLB divisor is 2 how it relates to synchronous clocking. 
10 PCI-PLB divisor is 3 
11 PCI-PLB divisor is 4 


19:20 | EPDV | External Bus-PLB Frequency Divisor 
00 External bus—PLB divisor ratio is 2:1 
01 External bus—PLB divisor ratio is 3:1 
10 External bus—PLB divisor ratio is 4:1 
11 External bus—PLB divisor ratio is 5:1 


EE 


2 


7.7.2 Chip Control Register 0 (CPCO_CRO) 


Only CPCO_CRO fields related to clocking are shown in Figure 7-3. CPCO_CR0p9.23, which control 
GPIO and UART functions, are summarized in “CPCO_CRO” on page 25-17. 
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Figure 7-3. Chip Control Register 0 (CPCO_CRO) 


Reserved 


CPU Trace Enable Trace interface cannot be used when GPIO 
O GPIO1-9 are enabled is enabled. 
1 GPIO1-9 are disabled 


GPIO 10 Enable 
0 Enable PerCS1 as a chip select 
1 Enable PerCS1 as GPIO10 


GPIO 11 Enable 
0 Enable PerCS2 as a chip select 
1 Enable PerCS2 as GPIO11 


GPIO 12 Enable 
0 Enable PerCS3 as a chip select 
1 Enable PerCS3 as GPIO12 


GPIO 13 Enable 
0 Enable PerCS4 as a chip select 
1 Enable PerCS4 as GPIO13 


GPIO 14 Enable 
0 Enable PerCS5 as a chip select 


1 Enable PerCS5 as GPIO14 


GPIO 15 Enable 
0 Enable PerCS6 as a chip select 
1 Enable PerCS6 as GPIO15 


GPIO 16 Enable 
0 Enable PerCS7 as a chip select 
1 Enable PerCS7 as GPIO16 


GPIO 17 Enable * The purpose of GPIO_17_EN through 
O Enable interrupt IRQO as aninterrupt © GPIO_23_EN is to isolate the interrupt 
1 Enable interrupt IRQO as GPIO17 controller from activity on a shared pin 
when that pin is being used as a GPIO. For 
instance, when G17E is set to a 1, IRQO at 
the UIC will always be forced to a zero. 
Note: Setting G17E to a 0 will not prevent 
GPIO channel! 17 (if configured as an 
output) from creating contention with 
the off-chip source of the IRQ input. 
Therefore, be sure to leave the shared 
GPIO channel disabled when using | 
the pin as an interrupt input. 
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GPIO 18 Enable 
0 Enable interrupt IRQ1 as an interrupt 
1 Enable interrupt IRQ1 as GPIO18 


GPIO 19 Enable 
0 Enable interrupt IRQ2 as an interrupt 
1 Enable interrupt IRQ2 as GPIO19 


GPIO 20 Enable 
0 Enable interrupt IRQ3 as an interrupt 
1 Enable interrupt IRQ3 as GPIO20 


GPIO 21 Enable 
0 Enable interrupt IRQ4 as an interrupt 
1 Enable interrupt IRQ4 as GPIO21 


GPIO 22 Enable 
0 Enable interrupt IRQ5 as an interrupt 
1 Enable interrupt IRQ5 as GPIO22 


GPIO 23 Enable 
0 Enable interrupt IRQ6 as an interrupt 
1 Enable interrupt IRQ6 as GPIO23 


DSR/CTS select 
O DSR is selected. 
1 CTS is selected. 


RTS/DTR select 
0 RTS is selected. 


1 DTR is selected. 


DMA Transmit Enable for UARTO 
0 DMA transmit channel is disabled. 
1 DMA transmit channel is enabled. 


DMA Receive Enable for UARTO 
0 DMA receive channel is disabled. 
1 DMA receive channel is enabled. 


DMA Allow Enable Clear for UARTO 

0 DTE and DRE for UARTO are not cleared 
when the UART receives a corresponding 
terminal count. 

1 DTE and DRE for UARTO are cleared 
when the UART receives a corresponding 
terminal count. 


Select External Clock for UARTO 

0 UARTO uses the internally derived serial 
clock 

1 UARTO uses the external serial clock 
input 

Select External Clock for UART1 

0 UART1 uses the internally derived serial 
clock 

1 UART1 uses the external serial clock 
input 
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26:30 | UDIV UART Internal Clock Divisor UDIV specifies the divisor of the CPU clock 
00000 Divide by 1 frequency used to derive a UART serial 
00001 Divide by 2 clock frequency. For example, if the CPU is 
00010 Divide by 3 running at 200MHz, a divider value of 20 


sets the serial clock frequency to 10MHz. 
Note: The maximum serial clock 
: frequency is less than 1/2 x OPB 
11110 Divide by 31 frequency 
11111 Divide by 32 


[Rene 
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Chapter 8. Reset and Initialization 


This chapter describes reset operations, the initial state of the PPC405GP processor core after a 
reset, and an example of the initialization code required to begin executing application code. 
Initialization of external system components or system-specific chip facilities must also be performed, 
in addition to the basic initialization described in this chapter. 


Reset operations affect the PPC405GP at power on time as well as during normal operation, if 
programmed to do so. To understand how these operations work it is necessary to first understand 
the signal pins involved as well as the terminology of core, chip and system resets. 


8.1 Reset Signals 


The PPC405GP provides two reset signals, SysReset and ExtReset. SysReset is bidirectional and 
ExtReset is an output. 


When the SysReset signal is an input (asserted by an off-chip device), such as during power on reset 
(POR), the chip responds by performing a system reset as described in a following section. An 
external assertion of SysReset is not extended by an assertion of the open drain bidirectional 
SysReset driver. 


As an output, the PPC405GP asserts the SysReset signal when a system reset request is detected. 
The SysReset open drain driver is activated and the signal is driven low for 8192 SysClk periods. This 
enables the PPC405GP to reset itself and other devices attached to the same reset network. 


The ExtReset signal is used by synchronous peripheral devices served by the PerClk external bus 
clock, such as ROM and external bus masters. During chip and system resets, ExtReset is asserted 
until the PerClk signal is stable and all internal resets are released. 


8.2 Reset Types 


Three types of reset, each with different scope, are possible in the PPC405GP. A core reset affects 
only the processor core. Chip resets affect the processor core and all on-chip peripherals. System 
resets affect the processor core, all on-chip peripherals, and any off-chip devices connected to the 
PPC405GP reset net. Refer to chapters describing the on-chip peripherals for detailed information 
about their reset behavior. 


8.2.1. Core Reset 


A core reset results in a reset of the processor core. No other on-chip logic is affected. Clocking logic, 
outside the processor core, detects the core reset request and asserts the reset input to the 
processor core for a period of 16 processor core clock cycles. 


8.2.2 Chip Reset 


A chip reset results in the reset of the processor core and on-chip peripherals. Clocking logic detects 
the request for a chip reset and asserts the reset input to the processor core for a period of 16 
processor core clock cycles. Subsequently, PLL locking is performed as described for a system reset. 
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During chip reset, the ExtReset signal is driven low to ensure the reset of synchronous devices that 
use the external bus clock signal, PerClk. 


8.2.3 System Reset 


A system reset results in a reset of all PPC405GP logic, including the processor core, internal phase- 
locked loop (PLL), and on-chip peripherals. A system reset can be initiated externally or internally. 
External system resets are initiated by the assertion of the SysReset signal for at least 16 SysClk 
cycles. Internal system resets are initiated by either the processor core or PCI power management 
logic. 


When a system reset is requested internally, the bidirectional open drain SysReset signal is asserted 
to enable other chips to be reset at the same time. In this case, the SysReset signal is driven low for 
8192 SysClk cycles, resulting ina System reset of the PPC405GP chip and all other devices attached 
to the reset network connected to SysReset. 


' After the SysReset signal is deasserted, the PLL begins its locking process, which also requires 8192 
SysClk cycles. When 64 SysClk cycles remain, the internal PPC405GP clocks (OPB, PCI, EXT, and 
Serial) begin toggling. The PLB and CPU clocks toggle while SysReset is asserted, and during the 
PLL locking process. When the PLL lock timer expires, internal resets are released, and the 
processor core begins its initial instruction fetch. 


During system reset, the ExtReset signal is driven low to ensure the reset of synchronous devices 
that use the external bus clock signal, PerClk. 


8.3. PCI Power Management Initiated Resets 


An external PCI master can write the Power Management Control/Status Register (PCICO_PMCSR) 
to request a change from the D3hot PCI power management state to the DO state. The on-chip PCI 
logic always accepts such a write and assumes that requested state changes from DShot are always 
to DO. After receiving such a write, the PCI logic asserts a signal that immediately results in an 
internally requested system reset. 


8.4 Processor Initiated Resets 


The processor core in the PPC405GP can request three types of processor resets: core, chip, and 
system. Each type of reset can be generated by a JTAG debug tool, by the second expiration of the 
watchdog timer, or by writing a non-zero value to the Reset (RST) field of the Debug Control Register 
0 (DBCRO). 


The effects of core and chip resets on the processor core are identical. To determine which reset type 
occurred, the most-recent reset (MRR) field of the Debug Status Register (DBSR) can be examined. 


8.5 Processor State After Reset 
After a reset, the contents of the Machine State Register (MSR) and the Special Purpose Registers 
(SPRs) control the initial processor state. The contents of Device Control Registers (DCRs) control 


the initial states of on-chip devices. Chapter 25, “Register Summary,’ contains descriptions of the 
registers. ; 
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In general, the contents of SPRs are undefined after a reset. Reset initializes the minimum number of 
SPR fields required for allow successful instruction fetching. “Contents of Special Purpose Registers 
after Reset” on page 8-4 describes these initial values. System software fully configures the 
processor. 


“Machine State Register Contents after Reset” on page 8-3 describes the MSR contents. 


The MCI field of the Exception Syndrome Register (ESR) is cleared so that it can be determined if 
there has been a machine check during initialization, before machine check exceptions are enabled. 


Two SPRs contain status on the type of reset that has occurred. The Debug Status Register (DBSR) 
contains the most recent reset type. The Timer Status Register (TSR) contains the most recent 
watchdog reset. 


8.6 Processor Register Contents After Reset 


After a reset, the contents of the SPRs control the initial processor state. The initial register contents 
vary with the type of reset that occurred. 


Chapter 25, “Register Summary,’ contains descriptions of the registers referred to in Table 8-1 
through Table 8-3. 


8.6.1 Machine State Register Contents after Reset 
After all resets, all fields of the Machine State Register (MSR) contain zeros. Table 8-1 shows how 
this affects chip operation. 

Table 8-1. MSR Contents after Reset 
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Register Reset Reset Reset Comment 
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8.6.2 Contents of Special Purpose Registers after Reset 


In general, the contents of Special Purpose Registers (SPRs) are undefined after a core, chip, or 
system reset. Some SPRs retain the contents they had before a reset occurred. 


Table 8-2 shows the contents of SPRs that are defined or unchanged after core, chip, and system 
resets. 


Table 8-2. SPR Contents After Reset 


Register | Bits/Fields Chip Reset System Reset 


DBCRO | EDM External debug mode 
disabled 


esr [we [| 00 _—[rorestacen 


DBCRI oxoo000000 +=} ox00000000 ~=—i| ox00000000 _| Instruction, data compares 
disabled 


foesR fawn [| (trot 


| reserve 
|SGR_—-|G0:G31_— | oxFFFFFFFF | OxFFFFFFFF | OxFFFFFFFF _| Storage is guarded 


SLER $0:S31 0x00000000 0x00000000 0x00000000 Storage is big endian 
SUOR K0:K31 0x00000000 0x00000000 0x00000000 Storage is uncompressed 


8.7 DCR Contents after Reset 


DCR reset values are unaffected by core resets and are generally identical for chip and system 
resets. 


Table 8-3. DCR Contents After Reset 


Chip Control 


CPO_PSR 0:31 At POR, CPCO_PSR fields are set to the strapping values of 
the corresponding pins. CPCO_PSR is read-only. 


CPRCO_JTAGID 0:31 Refer to PPC405GP Embedded Processor Data Sheet for the 
value of this read-only register. 
CPCO_PLLMR 0:31 At POR, CPCO_PLLMR fields are set to strapping values of the 
corresponding pins. CPCO_PLLMR is read-only 
Clock and Power Management (CPM) 
CPCO_ER OxFFFF8000 | CPCO_ERp-1¢ return 1, CPCO_ERj7.34 return 0. 
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Table 8-3. DCR Contents After Reset (continued) 


Decompression Controller 


DCP0_ADDRO 0:31 | 0x00000000 

DCPO_ADDR1 0:31 | 0x00000000 

DCPO_ITORO 0x00000000 
DCPO_ITOR1 0x00000000 
DCP0_ITOR2 0x00000000 
DCPO_ITOR3 0x00000000 
DCPO_PLBBEAR 0x00000000 
DCP0_RAMO- 1KB | Undefined 

DCP0_RAM3FF 


Direct Memory Access (DMA) 


DMAO_POL 0:31 | Ox00000000 
DMAO0_SAO 0:31 | OxO0000000 
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Table 8-3. DCR Contents After Reset (continued) 
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[pune sez [ost [owootce0 [ 


DMA0_SG3 0x00000000 
DMAO_SGC 0x00000000 
DMAO_SLP 0:31 | 0x7C000000 
DMAO_SR 0:31 | 0x00000000 
External Bus Controller (EBC) 


EBCO_BOAP 0:31 | Ox7F8FFE80 
EBCO_BOCR | OxFFE28000 
EBCO_B1AP 0x00000000 
EBCO_B1CR 0x00000000 


Slowest possible bus timings. 
2MB read-only bank. 


Indirect Addressing Registers 


DCPO_CFGADDR 
DCPO_CFGDATA 
EBCO_CFGADDR 


0x00000000 


0x00000000 
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Table 8-3. DCR Contents After Reset (continued) 


[Reiser [ts] Reserva [comment | 
fca_crsoma | [owns | SSSC—S 
[SoRawo_cFeaobR | [owoce0o0 [SS 
[Sonawo-cFeDAr [—[owoooe00 [SS 
Fl a a 


Media Access Layer (MAL) 


fuaieors_[osi[owmromo [SSCS 
fwata-esR [ost owomcee [SSS 
iwaioen [ost [owoononee | SSCSC~S~S~S 
wate rces —[osi|vndies [| ——SSC~S~S~S 
iwato-rxcasR [ost[oamoco [SS 
waia_rxcTPoR[osi|Uhaeines [SS 
iwato_rvoeR —[ost[owmmcee [SSCS 
waLa_AREOBGA [os [osoooooce [SS 
wala txoasR [ost fosoooooco [SSS 
wata-rxcreoR Jost Undeines [SSCS 
fuaLa-recreiR [osi|unaeines | SSCS 
fwata-txoem — [oat [owoooooce [SSCS 
wate rweoaisr [ost [owoecee0 [SSCS 
Oe ce ae ke 


On-Chip Buses 


jpcmonon [oat [orwooooooe | SSSCSCSCS~* 
PLBD_BeAR [oat [Undemes 
Popo.sean [oat [undeines 
[Pop sesno [oat [orwoocoome [SSCS 
[Pope_sesmi [oat [oroooooo0 
joowo.psanc—[oas[undeimed 
[eowo.osenTe oat [oxiooooo0 fT 
foowosanc [ost [undeineg [ 
fooworsowr. —_[ast[oxoooo00. [SSCS 
SDRAM Controller 

[soRawo_avoR [aat[oroooo000 | 
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Table 8-3. DCR Contents After Reset (continued) 


[resister Tits [Reset vate [Comment 
Universal Interrupt Controller (UIC) 


8.8 MMIO Register Contents After Reset 


MMIO registers are unaffected by core resets, and are generally identical for chip and system resets. 
Table 8-4. MMIO Register Contents After Reset 


| Ethernet (EMAC) 


fEwaco cari [esi owen [SSCS 
fEuaco.caima [asi oceooooro [SS 


aaa anes 
eo ed 
feuncaann ——[esr|oxcooooono [SS 
fewncn anTi___|est[owoooce0 [ 
feuncn_avTe—_[esrowoooces [SSCS 
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Table 8-4. MMIO Register Contents After Reset (continued) 


(resi [ato [rectvate [Comment 
EMACO_VTCI 0x00000000 
EMACO_VTPID 0x00008808 


General Purpose I/O (GPIO) 


GPIOO_IR Undefined Read-only; follows the GPIO_In input. 
GPIOO_ODR 0x00000000 
GPIOO_OR 0x00000000 


GPIOO_TCR 0x00000000 
Inter-Integrated Circuit (IIC) 
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Table 8-4. MMIO Register Contents After Reset (continued) 


fess [is] Reserve [Comment 


'}CO_MDCNTL 0:7 | 0x00 | 
11CO_SDBUF 0x00 


l1CO_XTCNTLSS 0x00 
OPB Arbiter 
OPBAO_CR 0x00000000 
OPBAO_PR 0:31 | 0x00011011 
PCI Bridge 
PCICO_BASECC [0:7 [oxo 
PCICO_BIST 
PCICO_BRDGOPT1 | 0:15 
Poicn_snocorr2|ois[owiod [SSS 
Paice cacres or [ooo [SSS 
Poco.car jor foco [SS 
ce_car Jor [ow [SSS 
Poicn_craaoorJost[oatooono [SSS 
Poice_creoma —_Jost|oatoeomo [SSS 
Poce-cs [eases [SSCS 
Poce_cwo—_|ovsfowono [SSCS 
Pocn-pevip_lows[owies [SSCS 
: i ice 
2 Rat ee et a a 
: Leet tee ee el 


Poica_hoTyPE [07 [ooo 

owcoes [or fooo [SCS 
Poco_wrets [or ooo [SSC 
pocennn [or ooo [SS 
Poico_wren or foot [SS 
Poot jor foor fC 
Poico_wawaney [a7 ooo [ 
Poca winewt [ov foo [ 
oce-newirma [or foo 
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Table 8-4. MMIO Register Contents After Reset (continued) 


eater [ons | Resetvane [Comment 
poten piBBEA [ost [owmnsoo [SSS—S 
Poicn pipaesno [asi [owen [| SSCSCSCS~S~S 
Poicn ripaesni [asi [owooooo [SSSSCSCSCSCS~S~S~S 
ron pc—|ovslooae [SSCS 
Poco pose [ois 
Poicn pwcsnase a7 ooo [SSS 
Poca pwsoan [ov ono [SSCS 
cn prea [asi jooomone [SSS 
Poicn_rrveban—|oai |owoooooog | 
roca_sesvso[owe[owono[ 
pocn_svecis ov ooo [SOS 
poo weno [owsfonora fC 
ouo-Puiwa—[oai [Unies [ 
Poto-Punnia [ost owoooooow | 
Pote-Punirown [031 [Undies [SS 
Pote-PuniPouA [osi|Uniined [SS 
rote-Puveta —[osi|Unisiee [SSS 
oto-Punena—[osi foros [SSCS 
Poto-Puarowa [osi|Uniined [SSS 
: fee 
eee et ee al 
eee 


PCILO_PTM2MS Undefined « 
PCICO_PLBBEAR2 | 0:31 | 0x00000000 
PCICO_PLBBEAR3 __ | 0:31 | 0x00000000 
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Table 8-4. MMIO Register Contents After Reset (continued) 


Serial Port (UART) 


ee ed 
[ee 
cae aCe 


UARTO_LCR 0x00000000 
UARTO_LSR 0x01 100000 
UARTO_MCR 0x00000000 
UARTO_MSR 0:7. | Oxxxxx0000 UARTO_MSRo-3 are driven by UARTO_DCD, UARTO_RI, 
UART1_DSRIUART1_CTS], and UART1 _RTS[UART1_DTR]. 
UARTO_RBR 0x00000000 
UARTO_SCR 0:7. | Undefined 
UARTO_THR 0x00000000 
UART1_DLL 0x00000000 
UART1_DLM 0x00000000 
UART1_FCR 0x00000000 
UART1_IER 0:7 | 0x00000000 
UART1_IIR 0:7 | 0x00000001 
UART1_LCR 0:7 | 0x00000000_ 
UART1_LSR 0:7 | 0x01100000 
UART1_MCR 0:7 | 0x00000000 
UART1_MSR 0:7. | Undefined 
UART1_RBR 0:7. | Undefined 
UART1_SCR 0:7 | Undefined 
UART1_THR 0:7 | ox00000000 


8.9 PPC405GP Chip Initialization 


The on-chip memory (OCM) controller and the universal Interrupt controller (UIC) require initialization 
for best performance (in the case of OCM) and proper operation (in the case of the UIC). The UART 
controller may require initialization, depending upon the application. 


Other peripheral devices can be initialized as appropriate for the system design. 


8-12 PPC405GP User’s Manual Preliminary 


8.9.1 OCM Initialization 
The following information applies if OCM is to be accessed. 


If instruction-side OCM is to be accessed, the OCM Instruction-Side Address Range Compare 
Register (OCMO_ISARC) must be initialized to locate the instruction-side OCM address space in the 
PPC405GP address map. If data-side OCM is to be accessed, the OCM Data-Side Address Range 
Compare Register (OCM0O_DSARC) must be initialized to locate the data-side OCM address space 
into the PPC405GP address map. “OCM Addressing” on page 5-1 provides details of the instruction- 
side OCM and data-side OCM address spaces. See “Memory Organization and Addressing” on 
page 3-1 for information about the PPC405GP memory map. 


8.9.1.1 Initializing Instruction-Side OCM 


The following procedure describes the steps to be taken If instruction-side OCM is to be accessed. 


. Set the ISEN field of the OCM Instruction-Side Control Register to disable instruction-side OCM 
accesses (OCMO_ISCNTL[ISEN] = 0). 


. To ensure that interrupts do not interfere with the instruction cache array invalidation performed in 
step 4, set MSR[EE] = 0 and MSR[CE] to mask interrupts. This prevents a potential problem 
caused by dirty cache addresses that would not be fetched from the cache because they are 
marked as non-cachable. 


_ 


ne) 


3. Mark the address region to be programmed as OCM address space as non-cachable. 


4. Invalidate the instruction cache array to ensure that no addresses to be programmed as OCM 
addresses are in the cache. The iccci instruction invalidates the instruction cache array. 


5. Modify the value in OCMO_ISARC. 


6. Set OCMO_ISCNTLI[ISEN] = 1 to enable instruction-side OCM accesses. Also, set 
OCMO_ISCNTL[ISTCM] = 0.) 


OCMO_ISCNTL[ISTCM] should be initialized to 0 to take the instruction-side OCM controller out of 
two cycle mode, the default mode after a reset. This enables instruction-side fetches to complete in a 
single cycle, providing the same performance as cache hits. See “OCM Instruction-Side Control 
Register (OCMO_ISCNTL)” on page 5-6 for details. 


8.9.1.2 Initializing Data-Side OCM 


The following procedure describes the steps to be taken if data-side OCM is used to load the initial 
contents of instruction-side OCM, or if data-side OCM is to be accessed. 


1. Set the DSEN field of the Data-Side Control Register to disable data-side OCM accesses 
(OCMO_DSCNTL[DSEN] = 0). 


2. To ensure that interrupts do not interfere with the data cache array invalidation performed in step 4, 
set MSR[EE] = 0 and MSR[CE] to mask interrupts. This prevents a potential problem caused by 
dirty cache addresses that would not be fetched from the cache because they are marked as non- 
cachable. 


3. Mark the address region that is to be programmed as OCM address space as non-cachable. 


4. Invalidate the data cache array to ensure that no addresses to be programmed as OCM addresses 
are in the cache. Use a sequence of dcbf instructions to invalidate the data cache. 
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5. Modify the value in OCMO_DSARC. 
6. Set OCMO_DSCNTL[DSEN] = 1 to enable data-side OCM accesses. 


OCMO_DSCNTL[DOF] should remain at its reset value of 1. See “OCM Data-Side Control Register 
(OCMO0_DSCNTL)” on page 5-7 for details. 


8.9.2 UIC Initialization 


The following information does not provide all initialization information for the UIC. Some initialization 
details are application-dependent. 


The polarity and sensitivity of the on-chip interrupts must be initialized for proper chip operation. The 
fields controlling on-chip interrupts in the UIC Polarity Register (UICO_PRpo-;g) must be set to 1. See 

“UIC Polarity Register (UICO_PR)” on page 10-10 for details. The fields controlling on-chip interrupts 
in the UIC Trigger Register (UICO_TRo.2 and UICO_TRy.1g) must be set to 0. The field controlling the 
external master interrupt trigger (UICO_TR3) must be set to 1. See “UIC Trigger Register (UICO_TR)” 
on page 10-13 for details. 


8.9.3 UART Initialization 


Bits 19 and 20 of Chip Contro! Register 0 (CPCO_CRO) control which of two modem control signal 
pairs, Data Set Ready (DSR) and Data Terminal Ready (DTR) or Clear to Send (CTS) and Ready to 
Send (RSR), are used. The signal pairs are implemented using the multiplexed pins 
UART1_DSR[UART1_CTS]}, controlled by CPCO_CR0;9, and UART1_RTS[UART1_DTR], controlled 
by CPCO_CR0go. After reset, CPCO_CR019 or CPCO_CROs9 must be changed to achieve a required 
typical pairing. 


8.10 PPC405GP Initial Processor Sequencing 


After any reset, the processor core fetches the word at address OxFFFFFFFC and attempts to 
execute it. Because the only memory configured immediately after reset is the upper 2MB region 
(OxFFEQ0000-OxFFFFFFFF), the instruction at OXFFFFFFFC must be a branch instruction. 


Because the processor is initially in big endian mode, initialization code must be in big endian format 
until the endian storage attribute for the addressed region is changed, or until code branches to a 
region defined as little endian storage. 


Before a reset operation begins, the system must provide non-volatile memory, or memory initialized 
by some mechanism external to the processor. This memory must be located at address 
OxFFFFFFFC in the upper 2MB region. This memory can be attached to the external bus controller 
(EBC) or to the system PC! bus. For memory attached to the EBC, the upper 2MB bank configuration 
after reset is 256 wait states, three cycles of address to chip select delay, three cycles of chip select to 
output enable delay, and seven cycles of hold time. The bus width (8-, 16-, or 32-bit) is controlled by 
the ROM width strapping signals. See “Pin Strapping” on page 9-1 for details. See “Local Processor 
Boot from PCI Memory” on page 17-64 for information about memory attached to the system PCI 
bus. 
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8.11 Initialization Requirements 


When any reset is performed, the processor is initialized to a minimum configuration to start executing 
initialization code. Initialization code is necessary to complete the processor and system 
configuration. 


The initialization code example in this section performs the configuration tasks required to prepare the 
PPC405GP to boot an operating system or run an application program. 


Some portions of the initialization code work with system components that are beyond the scope of 
this manual. 


Initialization code should perform the following tasks to configure the processor resources. 


To improve instruction fetching performance: initialize the SGR appropriately for guarded or 
unguarded storage. Since all storage is initially guarded and speculative fetching is inhibited to 
guarded storage, reprogramming the SGR will improve performance for unguarded regions. 


1. Configure the following storage attribute control registers, if necessary: 
— Initialize the SLER to configure storage byte ordering. 
— Initialize the SUOR to configure storage compression. 
2. Before executing instructions as cachable: 
— Invalidate the instruction cache. 
— Initialize the ICCR to configure instruction cachability. 
3. Before using storage access instructions: 
Invalidate the data cache. 
Initialize CRRO to determine if a store miss results in a line fill (SWOA). 


Initialize the DCWR to select copy-back or write-through caching. 
Initialize the DOCR to configure data cachability. 


4. Before allowing interrupts (synchronous or asynchronous): 


— Initialize the EVPR to point to vector table. 
— Provide vector table with branches to interrupt handlers. 


5. Before enabling asynchronous interrupts: 


— Initialize timer facilities. _ 
— Initialize MSR to enable appropriate interrupts. 


6. Initialize other processor features, such as the MMU, debug, and trace. 
7. Initialize non-processor resources. 


— Initialize system memory as required by the operating system or application code. 
— Initialize off-chip system facilities. 


8. Start the execution of operating system or application code. 
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8.12 Initialization Code Example 


The following initialization code illustrates the steps that should be taken to initialize the processor 
before an operating system or user programs begin execution. The example is presented in pseudo- 
code; function calls are named similarly to PPC405GP mnemonics where appropriate. 


GS a a 
/* —PPC405GP Initialization Pseudo Code */ 
| */] 
@OxFFFFFFFC: /* initial instruction fetch from OxFFFFFFFC ab 
ba(init_code);. /* branch to initialization code */ 
@init_code: 
tt ————————[— uc i i —__ */ 
/* Configure guarded attribute for performance. i 
| */ 


mtspr(SGR, guarded_attribute); 


p $$ Sh */ 
/* Configure endianness and compression. *} 
a ag ry, 


mtspr(SLER, endianness); 
mtspr(SUOR, compression_attribute); 


es a 8 
/* Invalidate the instruction cache and enable cachability */ 
a 
iccci; /* invalidate i-cache */ 

mtspr(ICCR, i_cache_cachability); : /* enable I-cache*/ 
isync; 
eS 
/* \Invalidate the data cache and enable cachability “f 
8 
address = 0; /* start at first line */ 


for (line = 0; line <m_lines; line++) /* D-cache has m_lines congruence classes */ 


decci(address); /* invalidate congruence class */ 
address += 32; /* point to the next congruence class ob 


mtspr(CCRO, store-miss_line-fill); 
mtspr(DCWR, copy-back_write-thru); 


mtspr(DCCR, d_cache_cachability); /* enable D-cache */ 
isync; 

a */ 
/* Prepare system for synchronous interrupts. */ 
(a | 
mtspr(EVPR, prefix_addr); /* initialize exception vector prefix */ 
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/* Initialize vector table and interrupt handlers if not already done */ 


/* a eS */ 
/* Prepare system for asynchronous interrupts. */ 
/* eH 
/* Initialize and configure timer facilities a 
mtspr(PIT, 0); /* clear PIT so no PIT indication after TSR cleared*/ 
mtspr(TSR, OxFFFFFFFF); /* clear TSR EI 
mtspr(TCR, timer_enable); /* enable desired timers */ 
mtspr(TBL, 0); /* reset time base low first to avoid ripple “i 
mtspr(TBU, time_base_u); /* set time base, hi first to catch possible ripple */ 
mtspr(TBL, time_base_|); /* set time base, low */ 
mtspr(PIT, pit_count); /* set desired PIT count */ 
/* Initialize the MSR a 
/* Exceptions must be enabled immediately after timer facilities to avoid missinga  */ 
/* timer exception. a 
la */ 
/* The MSR also controls privileged/user mode, translation, and the wait state. */ 
/* These must be initialized by the operating system or application code. “h 
/* lf enabling translation, code must initialize the TLB. / 
/* ee eee ee ae ee ss */ 


mtmsr(machine_state); 


fe ny 
/* Initialization of other processor facilities should be performed at this time. */ 
/* a */ 
ti ee ee ee 
/* Initialization of non-processor facilities should be performed at this time. */ 
[<a nF 
/* ea a ee . F | 
/* Branch to operating system or application code can occur at this time. */ 
/* EY 
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Chapter 9. Pin Strapping and Sharing 


9.1 Pin Strapping 


When power is applied to the PPC405GP, a start-up process is initiated in which internal functions 
are initialized. Some of these functions have optional choices. Which of the options are used for 
initialization is determined by the way a specific set of I/O pins (balls) are conditioned. The 
conditioning is achieved using external pull-up (indicated as 1) or pull-down (indicated as 0) resistors 
connected to the pins. 


While the SysReset input signal is low (system reset), the state of the I/O pins is read to enable 
default initial conditions before PPC405GP start-up. The actual capture instant is the nearest SysClk 
clock edge before the deassertion of SysReset. The state of the pins as read is stored in the Chip Pin 
Strapping Register (CPCO_PSR) shown in Figure 9-1. Refer to PowerPC 405GP Embedded 
Processor Data Sheet, which describes the strapping pins. 


9.1.1. Chip Pin Strapping Register (CPCO_PSR) 


_ CPCO_PSR contains the state of the strapping pins as read during system reset. 


PFWD PT ODP EBDP RL PAE 


fe s[e a]e 5 6]? a]e wln ale ule wlll 


PFBD PDC PDP RW PAME 


Figure 9-1. Chip Pin Strapping Register (CPCO_PSR) 


PFWD | PLL Forward Divider 
00 Bypass Mode 
01 Divide by 3 
10 Divide by 4 
11 Divide by 6 


PLL Feedback Divider 
00 Divide By 1 
01 Divide By 2 
10 Divide By 3 
11 Divide By.4 
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PLL Tuning Note: The tune bits adjust parameters that 

000 Choice 1; TUNE[5:0] = 010001 contro! PLL jitter. The recommended values 

001 Choice 2; TUNE[5:0] = 010010 minimize jitter for the PLL implemented in 

010 Choice 3; TUNE[5:0] = 010011 the PPC405GP. These bits are shown for 

011 Choice 4; TUNE[5:0] = 010100 information only, and do not require 

100 Choice 5; TUNE{5:0] = 010101 modification except in special clocking 

101 Choice 6; TUNE(5:0] = 010110 circumstances, such as spread spectrum 

110 Choice 7; TUNE[5:0] = 010111 clocking. For details on the use of spread 

111 Choice 8; TUNE[5:0] = 100100 spectrum clock generators (SSCGs) with 
the PPC405GP, visit the technical 
documents area of the IBM PowerPC web 
site. 


PLB Divider from CPU 
00 Divide By 1 
01 Divide By 2 
10 Divide By 3 
11 Divide By 4 


OPB Divider from PLB 
00 Divide By 1 
01 Divide By 2 
10 Divide By 3 
11 Divide By 4 


PCI Divider from PLB 
00 Divide By 1 
01 Divide By 2 
10 Divide By 3 


11 Divide By 4 


External Bus Divider from PLB 
00 Divide By 2 
01 Divide By 3 
10 Divide By 4 
11 Divide By 5 


ROM Width 
00 8-bit ROM 
01 16-bit ROM 
10 32-bit ROM 
11 Reserved 


ROM Location 
0 405GP Peripheral Attach 
1 405GP PCI Attach 


Reserved 


PCI Asynchronous Mode Enable 
0 Synchronous PCI Mode 
1 Asynchronous Mode 


Reserved ; 


PCI Arbiter Enable 
0 Internal Arbiter Disabled 
1 Internal Arbiter Enabled 


| Reserved 
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9.2 Pin Sharing 


The PPC405GP uses pin (ball) multiplexing (sharing) to reduce the total pin requirement without 
significantly reducing functionality. Some of the pins that are multiplexed require DCR register 
programming to configure the pin for the desired function. It is expected that in an application, a 
particular pin is programmed to serve one function. While nothing prevents changing the function of a 
pin during operation, most applications configure a pin once at power-on reset (POR). Table 9-1 lists 
the multiplexed PPC405GP signals and indicates the DCR bit that controls the pin. The default signal 
appears first and the alternate signal is in brackets. 


Table 9-1. Multiplexed Pins 


GPIO1[TS1E] CPCO_CRO[TRE] Set of GPIO pins that can be reconfigured for use as 
GPIO2[TS2E] the CPU Trace interface. 


GPIO3[TS10] 
GPIO4[TS20] 
GPIO5[TS3] 
GPIO6[TS4] 
GPIO7[TS5] 
GPIO8[TS6] 
GPIO9[TrcClk] 


PerCS1[GP1O10} 
PerCS2[GP1011] 
ParCSSGPIO‘a 
IRQ3[GPIO20] 
IRQ4[GPIO21] 


Peripheral Chip selects that can be reconfigured for 
use as GPIOs. 


External Interrupts that can be reconfigured for use 
as GPIOs. 


IRQ5[GPIO22] CPCO_CRO[G22E] 


IRQ6[GPIO23] _ | CPCO_CRO[G23E] 
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Table 9-1. Multiplexed Pins (continued) 


UART1_DSR[UART1_CTS]' | CPCO_CRO[DCS] UART? DSR pin that can be reconfigured for use as 
UART1 CTS. 

| UART1_RTS[UART1_DTR]'’ | CPCO_CRO[RDS] UART1 RTS pin that can be reconfigured for use as 
UART1 DTR. 


PCHNT[PerWE} CPCO_CR1[PCIPW] PCI Interrupt output that can be reconfigured for use 
by peripherals as a Write Byte Enable (logical AND 
of the four PerWBE0:3 write byte enables). 


PCiReq0[Gnt] CPCO_PSR[PAE] PClIReq0 when internal arbiter is used or Gnt when 
external arbiter is used. 

PCIGnt0[Req] CPCO_PSR[PAE] PCIGnt0 when internal arbiter is used or Req when 
external arbiter is used. 


Note: Typically DSR and DTR are paired and CTS and RTS are paired. With the current multiplex defaults 
one of the pins must be changed during initialization to achieve the typical pairings. 
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Chapter 10. Interrupt Controller Operations 


The PPC405GP contains a universal interrupt controller (UIC) that provides all necessary control, 
status, and communication between the various internal and external interrupt sources and the 
processor core. 


10.1 UIC Overview 


The UIC supports 19 internal interrupts and 7 external interrupts. Status reporting (using the UIC 
Status Register [UICO_SR)]) is provided to ensure that systems software can determine the current 
and interrupting state of the system and respond appropriately. Software can generate interrupts to 
simplify software development and for diagnostics. 


The interrupts can be programmed, using the UIC Critical Register (UICO_CR), to generate either a 
critical or a non-critical interrupt signal to the processor core. 


The privileged mtder and mfder instructions, which are used by system software, are used to read 
* and write the UIC registers. ; 


An optional critical interrupt vector generator can reduce interrupt handling latency for critical 
interrupts. Vector calculation is described in detail in “UIC Vector Register (UICO_VR)” on page 10-18. 


10.2 UIC Features 


¢ Support for 19 internal and 7 external interrupts 

¢ Support for asychronous level- or edge-sensitive interrupt types 

¢ Programmable polarity for all interrupt types 

¢ Programmable critical/non-critical interrupt selection for each interrupt bit 
¢ Prioritized critical interrupt vector generation 

¢ A UIC Status Register (UICO_SR) providing the following information: 


— Current state of interrupts 
— Current state of all enabled interrupts (those masked using the UIC Enable Register (UICO_ER)) 


10.3 UIC Interrupt Assignments 
The UIC supports various internal and external interrupt sources as shown in Table 10-1. 


Table 10-1. UIC Interrupt Assignments 


Haterupt| Polarity [Sensitivity [InteruptSouree | 
a 
| 

| 
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Table 10-1. UIC Interrupt Assignments (continued) 


Tterupt] Polarity | Senaiiviy [Interrupt Sous 
8 [Highedge [Ewtemal Master ——S—=S 
(6 [righ _[teve____—[DMAGhannelt 
8 [righ 
(sigh have‘ EthemetWake Up 
MAL System Error (SERR) 

| 11 [High | [Level ~=——_—| MAL TX End of Buffer (TXEOBO) 
MAL RX End of Buffer (RXEOB) 
MAL TX Descriptor Error (TXDE) 
MAL RX Descriptor Error (RXDE) 
External PCI SERR 
ECC Correctable Error 
Level PCI Power Management 


15 
16 
17. 
18 


2 

22 
23 
24 


Reserved 


Programmabl 
e 


Programmab! | External IRQ 0 
e 
26 Programmabl | Programmabl | External IRQ 1 
e e 
27 Programmabl | Programmabl! | External IRQ 2 
e e 
Programmab! | Programmabl | External IRQ 3 
cS) e 
29 Programmabl | Programmab! | External IRQ 4 
e ce) 
30 Programmabl | Programmabl | External IRQ 5 
e e 
Programmabl | Programmabl | External IRQ 6 
) e 
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10.4 Interrupt Programmability 


The on-chip interrupts (interrupts 0-18) and the external IRQs (interrupts 25-31) are programmable. 
However, the polarity and sensitivity of the on-chip interrupts must be programmed as shown in 
Table 10-1, using the UIC Polarity Register (UICO_PR) and UIC Trigger Register (UICO_TR), 
respectively. 


10.5 UIC Registers 


The UIC includes the Device Control Registers (DCRs) listed in Table 10-2. 


The registers are accessed using the mfder and mtdcr instructions. 


Table 10-2. UIC DCRs 


[winemonie[ _Register__—_—~[Address [Access | Page| 


UICO_VR | UIC Vector Register 
UIC Vector Configuration Register 
10.5.1 UIC Status Register (UICO_SR) 


To report interrupt status, the UICO_SR fields capture and hold internal and external interrupts until 
the fields are intentionally reset. To reset a field, write 1 to the field. 


The values of other UIC registers do not affect UICO_SR fields. 


UIOS ICIS PCIIS D1IS D3IS MSIS MREIS MADIS EPSIS PPMIS EIR1S EIRSS EIRSS 
[0] 4] 2] 3] 4] 5] 6] 7] 8] 9] 10/11] 12] 13] 14] 15] 16/17] 18}19 24] 25) 26) 27/28) 29) 30/31 


UNS EMIS DOIS D2IS EWIS MTEISMTDIS ENIS' ECIS EIROS EIR2S EIR4S E!IR6S 


Figure 10-1. UIC Status Register (UICO_SR) 


UARTO Interrupt Status 
0 A UARTO interrupt has not occurred. 
1 A UARTO interrupt occurred. 


UART1 Interrupt Status 
0 A UART1 interrupt has not occurred. 
1 A UART1 interrupt occurred. 
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1IC Interrupt Status 
0 An IIC interrupt has not occurred. 
1 An lIC interrupt occurred. 


External Master Interrupt Status 

0 An external! master interrupt has not 
occurred. 

1 An external master interrupt occurred. 


PCI Interrupt Status 
0 A PCI interrupt has not occurred. 
1 A PCl interrupt occurred. 


DMA Channel 0 Interrupt Status 

0 A DMA channel 0 interrupt has not 
occurred. 

1 A DMA channel 0 interrupt occurred. 


DMA Channel 1 Interrupt Status 

0 ADMA channel 1 interrupt has not 
occurred. 

1 A DMA channel-1 interrupt occurred. 


DMA Channel 2 Interrupt Status 
0 A DMA channel! 2 interrupt has not 
occurred. 


1 ADMA channel 2 interrupt occurred. 


DMA Channel 3 Interrupt Status 

0 A DMA channel 3 interrupt has not 
occurred. 

1 A DMA channel 3 interrupt occurred. 

Ethernet Wake-up Interrupt Status 

0 An Ethernet wake-up interrupt has not 
occurred. 

1 An Ethernet wake-up interrupt occurred. 


MAL SERR Interrupt Status 


0 A MAL SERR interrupt has not occurred. 


1 A MAL SERR interrupt occurred. 


MAL TX EOB Interrupt Status 

0 AMAL TX EOB interrupt has not 
occurred. 

1 AMAL TX EOB interrupt occurred. 


MAL RX EOB Interrupt Status 

0 A MAL RX EOB interrupt has not 
occurred. 

1 A MAL RX EOB interrupt occurred. 


MAL TX DE Interrupt Status 


0 AMAL TX DE interrupt has not occurred. 


1 AMAL TX DE interrupt occurred. 
MAL RX DE Interrupt Status 


0 AMAL RX DE interrupt has not occurred. 


1 A MAL RX DE interrupt occurred. 


10-4 PPC405GP User’s Manual 


Preliminary 


15 Ethernet Interrupt Status 
O An Ethernet interrupt has not occurred. 
1 An Ethernet interrupt occurred. | 


16 External PCI SERR Interrupt Status 
O An external PC! SERR interrupt has not 
occurred. 
1 An external PCI SERR interrupt 


occurred. 


17 ECIS ECC Correctable Error Interrupt Status 
0 An ECC correctable error interrupt did 
not occur. 
1 An ECC correctable error interrupt 
occurred. 


PPMIS | PC! Power Management Interrupt Status 
0 A PCI power management interrupt did 
not occur. 
1 A PCI power management interrupt 


occurred. 


|_| Reserved 


fee IRQ 0 Status 
0 An external IRQ 0 interrupt has not 
occurred. — 


1 An external IRQ 0 interrupt occurred. 


External IRQ 1 Status 

0 An external IRQ 1 interrupt has not 
occurred. 

1 An external IRQ 1 interrupt occurred. 


External IRQ 2 Status 

0 An external IRQ 2 interrupt has not 
occurred. 

1 An external [RQ 2 interrupt occurred. 


External IRQ 3 Status 

O An external IRQ 3 interrupt has not 
occurred. 

1 An external IRQ 3 interrupt occurred. 


External IRQ 4 Status 

0 An external IRQ 4 interrupt has not 
occurred. 

1 An external IRQ 4 interrupt occurred. 


External IRQ 5 Status 

0 An external IRQ 5 interrupt has not 
occurred. 

1 An external IRQ 5 interrupt occurred. 


External IRQ 6 Status 

0 An external IRQ 6 interrupt has not 
occurred. 

1 An external IRQ 6 interrupt occurred. 
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10.5.2 UIC Enable Register (UICO_ER) 


The fields of the UICO_ER, which correspond to the fields of the UICO_SR, enable or disable the 
reporting of the corresponding fields of the UICO_SR. 


If a UICO_ER field is set to 1, the corresponding field of the UICO_SR generates a critical or non- 
critical interrupt signal to the processor core, if the UICO_SR field is set to 1. If a UICO_ER field is set 
to 0, the corresponding field of the UICO_SR does not generate a critical or non-critical interrupt 
signal to the processor core, regardless of the setting of the UICO_SR field. The critical and non- 
critical interrupt signals in the processor core are controlled by fields in the Machine State Register 
(MSR). 


The class of generated signals (critical or non-critical) is controlled by the UICO_CR. 


UOIE IICIE PCIE DIIE D3IE MSIE MREIE MRDIE EPSIE PPMIE EIR1E EIRSE EIRSE 


[0] 1] 2] 3] 4] 5] 6] 7] 8] 9] 70] 44] 12] 73] 14] 15] 16] 17] 18] 1924] 25] 26/27/2829) 30) 31] 


U1IE EMIE DOIE D2IE EWIE MTEIEMTDIE ENIE ECIE | EIROE EIR2E EIR4E EIR6E 


Figure 10-2. UIC Enable Register (UICO_ER) 


UARTO Interrupt Enable 
0 UARTO interrupt is disabled. 
1 UARTO interrupt is enabled. 


UART1 Interrupt Enable 
0 UART71 interrupt is disabled. 
1 UART1 interrupt is enabled. 


lIC Interrupt Enable 
0 IIC interrupt is disabled. 
1 IIC interrupt is enabled. 


External Master Interrupt Enable 
100 External master interrupt is disabled. 
1 OxxExternal master interrupt is enabled. 


PCI Interrupt Enable 
0 PCI interrupt is disabled. 
1 PCl interrupt is enabled. 


DMA Channel 0 Interrupt Enable 
‘| 0 DMA channel 0 interrupt is disabled. 
1 DMA channel 0 interrupt is enabled. 


DMA Channel 1 Interrupt Enable 
0 DMA channel 1 interrupt is disabled. 
1 DMA channel 1 interrupt is enabled. 


DMA Channel 2 Interrupt Enable 
0 DMA channel 2 interrupt is disabled. 
1 DMA channel! 2 interrupt is enabled. 
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DMA Channel 3 Interrupt Enable 
0 DMA channel 3 interrupt is disabled. 
1 DMA channel 3 interrupt is enabled. 


Ethernet Wake-up Interrupt Enable 
0 Ethernet wake-up interrupt is disabled. 
1 Ethernet wake-up interrupt is enabled. 


MAL SERR Interrupt Enable 
0 MAL SERR interrupt is disabled. 
1 MAL SERR interrupt is enabled. 


MAL TX EOB Interrupt Enable 
0 MAL TX EOB interrupt is disabled. 
1 MAL TX EOB interrupt is enabled. 


MAL RX EOB Interrupt Enable 
0 MAL RX EOB interrupt is disabled. 
1 MAL RX EOB interrupt is enabled. 


MAL TX DE Interrupt Enable 
0 MAL TX DE interrupt is disabled. 
1 MAL TX DE interrupt is enabled. 


MAL RX DE Interrupt Enable 
0 MAL RX DE interrupt is disabled. 
1 MAL RX DE interrupt is enabled. 


Ethernet Interrupt Enable 
0 An Ethernet interrupt is disabled. 
1 An Ethernet interrupt is enabled. 


External PC! SERR Interrupt Enable 


0 External PCI SERR interrupt is disabled. 
1 External PCI SERR interrupt is enabled. 


ECC Correctable Error Interrupt Enable 

0 ECC correctable error interrupt is 
disabled. 

1 ECC correctable error interrupt is 
enabled. 


PCI Power management Interrupt Enable 

0 PCI power management interrupt is 
disabled. 

1 PCI power management interrupt is 
enabled. 


Reserved 


External IRQ 0 Enable 
0 An external IRQ 0 interrupt is disabled. 
1 An external IRQ 0 interrupt is enabled. 


External IRQ 1 Enable 
0 An external IRQ 1 interrupt is disabled. 
1 An external IRQ 1 interrupt is enabled. 


External IRQ 2 Enable 
0 An external IRQ 2 interrupt is disabled. 
1 An external IRQ 2 interrupt is enabled. 
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External IRQ 3 Enable 
0 An external IRQ 3 interrupt is disabled. 
1 An external IRQ 3 interrupt is enabled. 


External IRQ 4 Enable 
0 An external IRQ 4 interrupt is disabled. 
1 An external IRQ 4 interrupt is enabled. 


30 EIR5E | External IRQ 5 Enable 
0 An externa! IRQ 5 interrupt is disabled. 
1 An external IRQ 5 interrupt is enabled. 


External IRQ 6 Enable 
0 An external IRQ 6 interrupt is disabled. 
1 An external IRQ 6 interrupt is enabled. 


10.5.3 UIC Critical Register (UICO_CR) 


The fields of the UICO_CR, which correspond to the fields of the UICO_SR and UICO_ER, determine 
whether an interrupt captured in the corresponding fields of the UICO_SR generates a non-critical or 
critical interrupt, if the interrupts are enabled in the corresponding fields of the UICO_ER. The 

processor handles critical interrupts when MSR[EE] = 1 and non-critical interrupts when MSR[CE]=1. 


If a UICO_CR field is set to 0, an enabled interrupt (captured in the corresponding field of the 
UICO_SR and enabled in the corresponding field of the UICO_ER) generates a non-critical interrupt 
signal to the processor core. If a UlICO_CR field is a 1, a critical interrupt signal is generated. 


UOIC IICIC PCIIC D1iIC D3IC MSIC MREIC MRDIC EPSIC PPMIC EIRIC EIR3C EIRS5C 


Oy 1] 2] 3] 4] 5] 8] 7] 8] 9] 10] 11] 12] 13] 14] 15] 16] 17] 170 


U1IT EMIC DOIC D2IC EWIC MTEICMTDIC ENIC ECIC EIROC EIR2C EIR4C EIR6C 


Figure 10-3. UIC Critical Register (\UICO_CR) 


UARTO Interrupt Class 
0 UARTO interrupt is non-critical. 
1 UARTO interrupt is critical. 


UART1 Interrupt Class 
Q UART1 interrupt is non-critical. 
1 UART1 interrupt is critical. 


IC Interrupt Class 
0 IIC interrupt is non-critical. 
1 IIC interrupt is critical. 


External Master Interrupt Class 
O External master interrupt is non-critical. 
1 External master interrupt is critical. 


PCI Interrupt Class 
0 PCI interrupt is non-critical. 
1 PCI interrupt is critical. 
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DOIC DMA Channel 0 Interrupt Class 
0 DMA channel 0 interrupt is non-critical. 


1 DMA channel 0 interrupt is critical. 


DMA Channel 1 Interrupt Class 
0 DMA channel 1 interrupt is non-critical. 
1 DMA channel 1 interrupt is critical. 


DMA Channel 2 Interrupt Class 
0 DMA channel 2 interrupt is non-critical. 
1 DMA channel 2 interrupt is critical. 


DMA Channel 3 Interrupt Class 
0 DMA channel 3 interrupt is non-critical. 
1 DMA channel 3 interrupt is critical. 


D1IC 


D2IC 


D3IC 


EWIC Ethernet Wake-up Interrupt Class 
0 Ethernet wake-up interrupt is non-critical. 


1 Ethernet wake-up interrupt is critical. 


MAL SERR Interrupt Class 
0 MAL SERR interrupt is non-critical. 
1 MAL SERR interrupt is critical. 


MAL TX EOB Interrupt Class 
0 MAL TX EOB interrupt is non-critical. 
1 MAL TX EOB interrupt is critical. 


MAL RX EOB Interrupt Class 
0 MAL RX EOB interrupt is non-critical. 
1 MAL RX EOB interrupt is critical. 


MAL TX DE Interrupt Class 
0 MAL TX DE interrupt is non-critical. 
1 MAL TX DE interrupt is critical. 


MAL RX DE Interrupt Class 
0 MAL RX DE interrupt is non-critical. 
1 MAL RX DE interrupt is critical. 


Ethernet Interrupt Class 
0 An Ethernet interrupt is non-critical. 
1 An Ethernet interrupt is critical. 


External PCI SERR Interrupt Class 

0 External PCI SERR interrupt is non- 
Critical. 

1 External PCI SERR interrupt is critical. 


MSIC 


os 
—_ 


MTEIC 


a 
ine) 


MREIC 


=i 
Lee) 


MTDIC 


- 


MRDIC 


= 
(o>) 


oa 


EIC 


EPSIC 


ba | 


— 4 — 4 
oOo) 


ECIC ECC Correctable Error Interrupt Class 
0 ECC correctable error interrupt is non- 
critical. 


1 ECC correctable error interrupt is critical. 


a4 
[ee] 


PPMIC | PCI Power management Interrupt Class 

0 PCI power management interrupt is non- 
critical. 

1 PCI power management interrupt is 


Critical. 


19:24 
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External IRQ 0 Class 

0 An external IRQ 0 interrupt is non- 
critical. 

1 An external IRQ 0 interrupt is critical. 


External IRQ 1 Class 

0 An external IRQ 1 interrupt is non- 
critical. 

1 An external IRQ 1 interrupt is critical. 


External IRQ 2 Class 

0 An external IRQ 2 interrupt is non- 
Critical. 

1 An externa! IRQ 2 interrupt is critical. 


External IRQ 3 Class 
0 An external IRQ 3 interrupt is non- 


critical. 
1 An external JRQ 3 interrupt is critical. 


External IRQ 4 Class 

0 An external IRQ 4 interrupt is non- 
critical. 

1 An external IRQ 4 interrupt is critical. 


External IRQ 5 Class 

0 An external IRQ 5 interrupt is non- 
Critical. 

1 An external IRQ 5 interrupt is critical. 


External IRQ 6 Class 
0 An external IRQ 6 interrupt is non- 
Critical. 


1 An external IRQ 6 interrupt is critical. 


10.5.4 UIC Polarity Register (UICO_PR) 


The fields of the UICO_PR, which correspond to the fields of the UICO_SR, determine whether the 
corresponding fields in the UICO_SR have a positive or negative polarity. 


For level-sensitive interrupts, a 0 in a UICO_PR field causes the corresponding interrupt to be 
negative active. A 1 in a UICO_PR field causes the corresponding interrupt to be positive active. 


For edge-sensitive interrupts, a 0 in a UICO_PR field causes the corresponding interrupt to be 
detected on a falling edge (as polarity changes from 1 to 0). A 1 in a UICO_PR field causes the 
corresponding interrupt to be detected on a rising edge (as polarity changes from 0 to 1). 


Because the on-chip interrupts (those controlled by UICO_PRp.1g) have positive polarity, the 
associated fields must be set to 1. 
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UIOP IICIP PCIIP DiIP D3IP MSIP MREIP MRDIP EPSIP PPMIP EIR1P EIR3P EIRSP 


0] 4] 2] 3] 4] 5] 6] 7] 8] 9] 10] 11] 12] 13] 74] 15] 16] 17] ie]i9. 24] 25]26) 27] 28) 29) 30/31) 


UMP EMIP DOIP D2iIP EWIP MTEIPMTDIP ENIP  ECIP EIROP EIR2P EIR4P EIR6P 


Figure 10-4. UIC Polarity Register (UICO_PR) 


UARTO Interrupt Polarity Must be set to 1. 
0 UARTO interrupt has negative polarity. 
1 UARTO interrupt has positive polarity. 


UART1 Interrupt Polarity Must be set to 1. 
0 UART1 interrupt has negative polarity. 
1 UART‘1 interrupt has positive polarity. 


lIC Interrupt Polarity Must be set to 1. 
0 IIC interrupt has negative polarity. 
1 IIC interrupt has positive polarity. 


External Master Interrupt Polarity Must be set to 1. 
0 External master interrupt has negative polarity. 
1 External master interrupt has positive polarity. 


PCI Interrupt Polarity Must be set to 1. 
0 PCI interrupt has negative polarity. 
1 PCI interrupt has positive polarity. 


DMA Channel 0 Interrupt Polarity Must be set to 1. 
0 DMA channel 0 interrupt has negative polarity. 
1 DMA channel 0 interrupt has positive polarity. 


DMA Channel 1 Interrupt Polarity Must be set to 1. 
0 DMA channel 1 interrupt has negative polarity. 
1 DMA channel 1 interrupt has positive polarity. 


DMA Channel 2 Interrupt Polarity Must be set to 1. 
0 DMA channel! 2 interrupt has negative polarity. 
1 DMA channel 2 interrupt has positive polarity. 


DMA Channel 3 Interrupt Polarity Must be set to 1. 
0 DMA channel 3 interrupt has negative polarity. 
1 DMA channel 3 interrupt has positive polarity. 


Ethernet Wake-up Interrupt Polarity Must be set to 1. 
0 Ethernet wake-up interrupt has negative polarity. 
1 Ethernet wake-up interrupt has positive polarity. 


MAL SERR Interrupt Polarity Must be set to 1. 
0 MAL SERR interrupt has negative polarity. 
1 MAL SERR interrupt has positive polarity. 


MAL TX EOB Interrupt Polarity Must be set to 1. 
0 MAL TX EOB interrupt has negative polarity. 
1 MAL TX EOB interrupt has positive polarity. 


Preliminary Interrupt Controller Operations 10-11 


MAL RX EOB Interrupt Polarity Must be set to 1. 
0 MAL RX EOB interrupt has negative polarity. 
1 MAL RX EOB interrupt has positive polarity. 


MAL TX DE Interrupt Polarity Must be set to 1. 
0 MAL TX DE interrupt has negative polarity. 
1 MAL TX DE interrupt has positive polarity. 


MAL RX DE Interrupt Polarity Must be set to 1. 
0 MAL RX DE interrupt has negative polarity. 
1 MAL RX DE interrupt has positive polarity. 


Ethernet Interrupt Polarity Must be set to 1. 
0 An Ethernet interrupt has negative polarity. 
1 An Ethernet interrupt has positive polarity. 


External PCI SERR Interrupt Polarity Must be set to 1. 
0 External PCI SERR interrupt has negative 

polarity. 
1 External PCI SERR interrupt has positive 

polarity. 
ECC Correctable Error Interrupt Polarity Must be set to 1. 
0 ECC correctable error interrupt has negative 

polarity. 
1 ECC.correctable error interrupt has positive 

polarity. 


PCI Power management Interrupt Class Must be set to 1. 


0 PCI power management interrupt has negative 
polarity. 

1 PCI power management interrupt has positive 
polarity. 


Reserved 


External IRQ 0 Polarity 
0 An external IRQ 0 interrupt has negative polarity. 
1 An external IRQ 0 interrupt has positive polarity. 


External IRQ 1 Polarity 
0 An external IRQ 1 interrupt has negative polarity. 
1 An external IRQ 1 interrupt has positive polarity. 


External IRQ 2 Polarity 
0 An external IRQ 2 interrupt has negative polarity. 
1 An external IRQ 2 interrupt has positive polarity. 


External IRQ 3 Polarity 
0 An external IRQ 3 interrupt has negative polarity. 
1 An external IRQ 3 interrupt has positive polarity. 


External IRQ 4 Polarity 
0 An external IRQ 4 interrupt has negative polarity. 
1 An external IRQ 4 interrupt has positive polarity. 


External IRQ 5 Polarity 
0 An external IRQ 5 interrupt has negative polarity. 
1 An external IRQ 5 interrupt has positive polarity. 
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External IRQ 6 Polarity 
0 An external IRQ 6 interrupt has negative polarity. 


1 An external IRQ 6 interrupt has positive polarity. 


10.5.5 UIC Trigger Register (UICO_TR) 


The fields of the UICO_TR, which correspond to the fields of the UlICO_SR, determine whether 
corresponding fields in the UICO_SR are edge-sensitive or level-sensitive. 


Edge-sensitive interrupts are triggered depending on whether the associated interrupt signal is rising 
or falling (changing from 0 to 1 or 1 to 0, respectively). Whether a rising or falling edge causes the 
trigger is controlled by bits in the UICO_PR. 


Level-sensitive interrupts are triggered depending on whether the associated interrupt signal is 
high (1) or low (0). 


If a UICO_TR field is 0, the associated interrupt is level-sensitive. If the UICO_TR field is 1, the 
interrupt is edge-sensitive. Because the on-chip interrupts (those controlled by UICO_TRo-2 4:18) are 
level-sensitive, the associated fields must be set to 0. The external master interrupt trigger (controlled 
by UICO_TR3) is edge-sensitive; this field must be set to 1. 


UIOT CIT PCHT D1IT D3IT MSIT MREIT MRDIT EPSIT PPMIT EIR1T EIR3T EIRST 


0] 1] 2) 3] 4] 5] 6] 7] 8] 9) 10) 11) 12) 13) 14] 15] 16/17] 18]19. 24] 25) 26) 27/28) 29] 30) 31 


UlNT EMIT DOIT D2IT EWIT MTEITMTDIT ENIT~ ECIT EIROT EIR2T EIR4T EIR6T 


Figure 10-5. UIC Trigger Register (UICO_TR) 


UARTO Interrupt Trigger Must be set to 0. 
0 UARTO interrupt is level-sensitive. 
1 UARTO interrupt is edge-sensitive. 


UART1 Interrupt Trigger Must be set to 0. 
0 UART1 interrupt is level-sensitive. 
1 UART1 interrupt is edge-sensitive. 


lIC Interrupt Trigger Must be set to 0. 
0 IIC interrupt is level-sensitive. 
1 IIC interrupt is edge-sensitive. 


External Master Interrupt Trigger Must be set to 1. 
0 External master interrupt is level- 

sensitive. 
1 External master interrupt is edge- 

sensitive. 


PCI Interrupt Trigger Must be set to 0. 
0 PCI interrupt is level-sensitive. 
1 PCt interrupt is edge-sensitive. 
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DMA Channel 0 Interrupt Trigger 

0 DMA channel 0 interrupt is level- 
sensitive. 

1 DMA channel 0 interrupt is edge- 
sensitive. 


DMA Channel! 1 Interrupt Trigger 

0 DMA channel 1 interrupt is level- 
sensitive. 

1 DMA channel 1 interrupt is edge- 
sensitive. 


DMA Channel 2 Interrupt Trigger 

0 DMA channel 2 interrupt is level- 
sensitive. 

1 DMA channel 2 interrupt is edge- 
sensitive. 


DMA Channel 3 Interrupt Trigger 

0 DMA channel 3 interrupt is level- 
sensitive. 

1 DMA channel 3 interrupt is edge- 
sensitive. 


Ethernet Wake-up Interrupt Trigger 

0 Ethernet wake-up interrupt is level- 
sensitive. 

1 Ethernet wake-up interrupt is edge- 
sensitive. 


MAL SERR Interrupt Trigger 
0 MAL SERR interrupt is level-sensitive. 
1 MAL SERR interrupt is edge-sensitive. 


MAL TX EOB Interrupt Trigger 
0 MAL TX EOB interrupt is level-sensitive. 


1 MAL TX EOB interrupt is edge-sensitive. 


MAL RX EOB Interrupt Trigger 
0 MAL RX EOB interrupt is level-sensitive. 


1 MAL RX EOB interrupt is edge-sensitive. 


MAL TX DE Interrupt Trigger 
0 MAL TX DE interrupt is level-sensitive. 
1 MAL TX DE interrupt is edge-sensitive. 


MAL RX DE Interrupt Trigger 
0 MAL RX DE interrupt is level-sensitive. 
1 MAL RX DE interrupt is edge-sensitive. 


Ethernet Interrupt Trigger 
0 An Ethernet interrupt is level-sensitive. 
1 An Ethernet interrupt is edge-sensitive. 


External PCI SERR Interrupt Trigger 

0 External PC! SERR interrupt is level- 
sensitive. 

1 External PCI SERR interrupt is edge- 
sensitive. 
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Must be set to 0. 


Must be set to 0. 


Must be set to 0. 


Must be set to 0. 


Must be set to 0. 


Must be set to 0. 


Must be set to 0. 


Must be set to 0. 


Must be set to 0. 


Must be set to 0. 


Must be set to 0. 


Must be set to 0. 
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ECC Correctable Error Interrupt Trigger Must be set to 0. 
0 ECC correctable error interrupt is level- 

sensitive. 
1 ECC correctable error interrupt is edge- 

sensitive. 


PPMIT | PCI Power management Interrupt Trigger Must be set to 0. 
0 PCI power management interrupt is 
level-sensitive. 
1 PCI power management interrupt is 
edge-sensitive. 


Reserved 


External IRQ 0 Trigger 

0 An external JRQ 0 interrupt is level- 
sensitive. 

1 An external IRQ 0 interrupt is edge- 
sensitive. 


External IRQ 1 Trigger 

0 An external IRQ 1 interrupt is level- 
sensitive. 

1 An external IRQ 1 interrupt is edge- 
sensitive. 


External IRQ 2 Trigger 

0 An external IRQ 2 interrupt is level- 
sensitive. 

1 An external IRQ 2 interrupt is edge- © 
sensitive. 


External IRQ 3 Trigger 

0 An external IRQ 3 interrupt is level- 
sensitive. 

1 An external IRQ 3 interrupt is edge- 
sensitive. 


External IRQ 4 Trigger 

0 An external! IRQ 4 interrupt is level- 
sensitive. 

1 An external IRQ 4 interrupt is edge- 
sensitive. 


External IRQ 5 Trigger 
0 An external IRQ 5 interrupt is level- 
sensitive. 


1 An external IRQ 5 interrupt is edge- 
sensitive. 

External IRQ 6 Trigger 

0 An external IRQ 6 interrupt is level- 
sensitive. 


1 An external IRQ 6 interrupt is edge- 
sensitive. 
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10.5.6 UIC Masked Status Register (UICO_MSR) 


This read-only register contains the result of masking the UICO_SR with the UICO_ER. Reading this 
register, instead of the actual UICO_SR, eliminates the need for software to read and apply the enable 
mask to the contents of the UICO_SR to determine which enabled interrupt fields are active. 


If an interrupt is configured as level-sensitive, and a clear is attempted on the UICO_SR, the UICO_SR 
field is not cleared if the incoming interrupt signal is at the asserted polarity. The interrupt signal must 
be reset before the UICO_SR can be successfully cleared. 


UIOS ICIS PCIIS D1IS D3IS_MSIS MREIS MRDIS EPSIS PPMIS EIRIS EIR3S EIRSS 
[0/1] 2] 3] 4] 5/6] 7] 8[ 9] 10] 41] 12) 13] 14] 15] 16/17] 18/19 __ 24] 25] 26/27] 28/29] 30] 31] 


UI1S EMIS DOIS D2IS EWIS MTEISMTDIS ENIS' ECIS EIROS EIR2S EIR4S EIR6S 


Figure 10-6. UIC Masked Status Register (UICO_MSR) 


UOIS UARTO Masked Interrupt Status 
0 A UARTO interrupt has not occurred. 
1 A UARTO interrupt occurred. 


UART1 Masked Interrupt Status 
0 A UART1 interrupt has not occurred. 
1 A UART1 interrupt occurred. 


lIC Masked Interrupt Status 
0 An IIC interrupt has not occurred. 
1 An lIC interrupt occurred. 


External Master Masked Interrupt Status 

0 An external master interrupt has not 
occurred. 

1 An external master interrupt occurred. 


PCI Masked Interrupt Status 


0 A PCI interrupt has not occurred. 
1 A PCl interrupt occurred. 


DMA Channel 0 Masked Interrupt Status 

0 ADMA channel 0 interrupt has not 
occurred. 

1 A DMA channel 0 interrupt occurred. 


DMA Channel 1 Masked Interrupt Status 

0 ADMA channel 1 interrupt has not 
occurred. 

1 A DMA channel 1 interrupt occurred. 


DMA Channel 2 Masked Interrupt Status 

0 A DMA channel 2 interrupt has not 
occurred. 

1 A DMA channel 2 interrupt occurred. 
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DMA Channel 3 Masked Interrupt Status 

0 A DMA channel 3 interrupt has not 
occurred. 

1 A DMA channel 3 interrupt occurred. 


Ethernet Wake-up Masked Interrupt Status 

0 An Ethernet wake-up interrupt has not 
occurred. 

1 An Ethernet wake-up interrupt occurred. 


MAL SERR Masked Interrupt Status 
0 A MAL SERR interrupt has not occurred. 
1 AMAL SERR interrupt occurred. 


MAL TX EOB Masked Interrupt Status 

0 AMAL TX EOB interrupt has not 
occurred. 

1 AMAL TX EOB interrupt occurred. 


MAL RX EOB Masked Interrupt Status 

0 AMAL RX EOB interrupt has not 
occurred. 

1 AMAL RX EOB interrupt occurred. 


MAL TX DE Masked Interrupt Status 


0 AMAL TX DE interrupt has not occurred. 


1 AMAL TX DE interrupt occurred. 
MAL RX DE Masked Interrupt Status 


0 AMAL RX DE interrupt has not occurred. 


1 AMAL RX DE interrupt occurred. 


Ethernet Masked Interrupt Status 
0 An Ethernet interrupt has not occurred. 
1 An Ethernet interrupt occurred. 


External PC] SERR Masked Interrupt 

Status 

0 An external PCI SERR interrupt has not 
occurred. 

1 An external PCI SERR interrupt 
occurred. 


ECC Correctable Error Masked Interrupt 

Status 

0 An ECC correctable error interrupt did 
not occur. 

1 An ECC correctable error interrupt 
occurred. 


PCI Power Management Masked Interrupt 

Status 

0 APCI power management interrupt did 
not occur. 


1 A PCI power management interrupt 
occurred. 


Reserved 
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External IRQ 0 Masked Status 

0 An external IRQ 0 interrupt has not 
occurred. , 

1 An external IRQ 0 interrupt occurred. 


External IRQ 1 Masked Status 

0 An external IRQ 1 interrupt has not 
occurred. 

1 An external IRQ 1 interrupt occurred. 


External IRQ 2 Masked Status 

0 An external IRQ 2 interrupt has not 
occurred. 

1 An external IRQ 2 interrupt occurred. 


External IRQ 3 Masked Status 

0 An external IRQ 3 interrupt has not 
occurred. 

1 An external IRQ 3 interrupt occurred. 


External IRQ 4 Masked Status 

0-An external IRQ 4 interrupt has not 
occurred. 

1 An external IRQ 4 interrupt occurred. 


External IRQ 5 Masked Status 

0 An external IRQ 5 interrupt has not 
occurred. 

1 An external IRQ 5 interrupt occurred. 


External IRQ 6 Masked Status 

0 An external IRQ 6 interrupt has not 
occurred. 

1 An external IRQ 6 interrupt occurred. 


10.5.7 UIC Vector Configuration Register (UICO_VCR) 


The write-only UlICO_VCR enables software control of interrupt vector generation for critical interrupts. 
UICO_VCR contains an address, used as an interrupt vector base address, and specifies interrupt 
ordering priority. Vector generation is not performed for non-critical interrupts. 


UICO_VCR[VBA] can contain either the base address for an interrupt handler vector table or the base 
address for the interrupt handler associated with each interrupt. The actual interrupt vector (the 
address of the interrupt handler that services the interrupt) is generated in the UICO_VR, using 
UICO_VCR[VBA]. Vector generation is described in “UIC Vector Register (UICO_VR)” on page 10-19. 
Because the two lowest-order bits of an interrupt handler address are assumed to be 00 to ensure 
word alignment, 30 bits are sufficient to form the base address. 


A general interrupt handler uses the vector to access a table of interrupt vectors. Each interrupt vector 
table entry contains the address of an interrupt handler for a specific interrupt. Alternatively, 
UICO_VCR[VBA] can directly address the interrupt handlers for specific interrupts, which in memory 
are separated by an offset calculated in UICO_VR. 


UICO_VCR[PRO] controls whether the interrupt associated with UICO_SR[0] or UICO_SR[31] has the 
highest priority. If UICO_VCR[PRO] = 0, the interrupt associated with UICO_SR[0] has the highest 
priority; if UlICO_VCR[PRO] = 1, the interrupt associated with UICO_SR[31] has the highest priority. 
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The bit closest to the highest priority field that is programmed in the UICO_CR as a interrupt has the 
second highest priority. Priority decreases across the UICO_SR to the end opposite the highest 
priority field. 


VBA 


* PRO 


Figure 10-7. UIC Vector Configuration Register (UICO_VCR) 


[eas [VOR [vecorsaseadies 
a 


31 Priority Ordering 
0 UICO_SR{O] is the highest priority 
interrupt. 
1 UICO_SR{[31] is the highest priority 
interrupt. 
Note: Vector generation is not performed 
for non-critical interrupts. 


10.5.8 UIC Vector Register (UICO_VR) 


The read-only UICO_VR contains an interrupt vector that can reduce interrupt handling latency for 
critical interrupts. Vector generation logic adds an offset to UICO_VCR[VBA], and the sum is returned 
in the UICO_VR. Vectors are not computed for non-critical interrupts. 


The interrupt vector is based on the field position of the current highest priority, enabled, active, 
critical interrupt relative to the highest priority interrupt in the UICO_SR. The generated vectors can be 
programmed to point directly to the interrupt handlers. 


Programming Note: Regardless of the programming of UICO_VCR and UICO_VR registers, the 
processor always vectors to EVPR[0:16] Il 0x100 when a critical interrupt occurs. 


The interrupt vector offset is based on the bit position of the current highest priority, enabled, active, 
critical interrupt relative to the highest priority interrupt in the UICO_SR. The offset has a fixed value of 
512 per bit. The main critical interrupt handler can interpret the vector returned by UICO_VR as the 
address of the interrupt handler for that interrupt, assuming the routine is 512 bytes or smaller. 
Alternatively, the main critical interrupt handler can interpret the vector as a look-up table entry for the 
address of the interrupt handler for that interrupt. 
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Figure 10-8. UIC Vector Register (UICO_VR) 


0:31 fill Interrupt Vector 


The following example illustrates the generation of a UICO_VR vector for external interrupt request 
IRQ2. 


For the example, assume that UICO_VCR[PRO] = 1, so that UICO_SR[EIR6S] (UICO_SR3,)has the 
highest interrupt priority, and that UICO_SR[EIR2S] (UICO_SRo7) is the current highest priority, 
enabled, active, critical interrupt. To generate the vector for the interrupt associated with 
UICO_SR[EIR2S], internal logic multiplies the difference between the highest priority interrupt bit and 
the active enabled priority interrupt bit by 512. The interrupt vector offset is therefore (31 — 

27) x 512 = 4 x 512. This offset is added to the base address in UICO_VCR[VBA], and the UICO_VR 
returns UICO_VCR[VBA] + (4 x 512). 


10.5.8.1 Using the Value in UICO_VR as a Vector Address or Entry Table Lookup 


If an interrupt handler is 512 bytes or smaller, system software can interpret the value returned in the 
UICO_VR as an address. In this case, when the interrupt is received, the UICO_VR is read and 
software simply jumps to the address represented by the UICO_VR value. Alternatively, the routine 
can be at a different address, and system software can treat the value of the UICO_VR as a pointer, 
storing the interrupt handler address in the UICO_VR during system initialization. In this case, when 
the interrupt is handled, software must read the UICO_VR, read the entry at the UICO_VR value, and 
jump to the entry. Hardware has no knowledge of the method is used, which is determined by system 
software. : 


10.5.8.2 Vector Generation Scenarios 


For the following sequence, assume that the interrupts are enabled and critical (vectors are not 
generated for disabled or non-critical interrupts). The sequence illustrates several scenarios for vector 
generation. 


—k 


. An intermediate priority interrupt goes active; its vector is stored in UICO_VR. 
2. A low priority interrupt goes active; UICO_VR is unchanged. 

3. Software reads the vector; UICO_VR is unchanged. 
4 


. Software resets the intermediate priority interrupt; UICO_VR contains the vector for the low priority 
interrupt. . 


5. A high priority interrupt goes active; UICO_VR contains the vector for the high priority interrupt. 


6. Software resets the high priority interrupt; UICO_VR contains the vector for the low priority 
interrupt. 
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7. Software resets the UICO_ER field for the low priority interrupt, disabling it; UICO_VR contains 
0x00000000. 


8. UICO_CR is reprogrammed to make the low priority interrupt non-critical and UICO_ER is 
reprogrammed to re-enable the low priority interrupt; UICO_VR continues to contain OxO0000000. 
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10.6 Interrupt Handling in the Processor Core 


An interrupt is the action in which the processor saves its old context (MSR and instruction pointer) 
and begins execution at a pre-determined interrupt-handler address, with a modified MSR. 
Exceptions are events which, if enabled, cause the processor to take an interrupt. Exceptions are 
generated by signals from internal and external peripherals, instructions, internal timer facilities, 
debug events, or error conditions. 


Table 10-4, “Interrupt Vector Offsets,” on page 10-27, lists the interrupts handled by the PPC405GP in 
the order of interrupt vector offsets. Detailed descriptions of each interrupt follow, in the same order. 
Table 10-4 also provides an index to the descriptions. 


Several registers support interrupt handling and control. “General Interrupt Handling Registers” on 
page 10-27 describes the general interrupt handling registers: 


e Data Exception Address Register (DEAR) 
e Exception Syndrome Register (ESR) 

e Exception Vector Prefix Register (EVPR) 
e Machine State Register (MSR) 

e Save/Restore Registers (SRRO-SRR3) 


10.7 Architectural Definitions and Behavior 


Precise interrupts are those for which the instruction pointer saved by the interrupt must be either the 
address of the excepting instruction or the address of the next sequential instruction. /mprecise 
interrupts are those for which it is possible (but not required) for the saved instruction pointer to be 
something else, possibly prohibiting guaranteed software recovery. 


Note that “precise” and “imprecise” are defined assuming that the interrupts are unmasked (enabled 
to occur) when the associated exception occurs. Consider an exception that would cause a precise 
interrupt, if the interrupt was enabled at the time of the exception, but that occurs while the interrupt is 
masked. Some exceptions of this type can cause the interrupt to occur later, immediately upon its 
enabling. In such a case, the interrupt is not considered precise with respect to the enabling 
instruction, but imprecise (“delayed precise”) with respect to the cause of the exception. 


Asynchronous interrupts are caused by events which are independent of instruction execution. All 
asynchronous interrupts are precise, and the following rules apply: 


1. All instructions prior to the one whose address is reported to the interrupt handling routine (in the 
save/restore register) have completed execution. However, some storage accesses generated by 
these preceding instructions may not have completed. 


2. No subsequent instruction has begun execution, including the instruction whose address is 
reported to the interrupt handling routine. 


3. The instruction having its address reported to the interrupt handler may appear not to have begun 
execution, or may have partially completed. 


Synchronous interrupts are caused directly by the execution (or attempted execution) of instructions. 
Synchronous interrupts can be either precise or imprecise. 
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For synchronous precise interrupts, the following rules apply: 


1. The save/restore register addresses either the instruction causing the exception or the next 
sequential instruction. Which instruction is addressed is determined by the interrupt type and 
status bits. 


2. All instructions preceding the instruction causing the exception have completed execution. 
However, some storage accesses generated by these preceding instructions may not have 
completed. 


3. The instruction causing the exception may appear not to have begun execution (except for causing 
the exception), may have partially completed, or may have completed, depending on the interrupt 
type. 


4. No subsequent instruction has begun execution. 


The PPC405GP does not implement any imprecise interrupts. Refer to /BM PowerPC Embedded 
Environment for an architectural description of imprecise interrupts. 


Machine check interrupts are a special case typically caused by some kind of hardware or storage 
subsystem failure, or by an attempt to access an invalid address. A machine check can be indirectly 
caused by the execution of an instruction, but not recognized or reported until long after the processor 
has executed past the instruction that caused the machine check. As such, machine check interrupts 
cannot properly be thought of as synchronous, nor as precise or imprecise. For machine checks, the 
following general rules apply: 


1. No instruction following the one whose address is ioponied to the machine check handler in 1 the 
save/restore register has begun execution. 


2. The instruction whose address is reported to the machine check handler in the save/restore 
register, and all previous instructions, may or may not have completed successfully. All previous 
instructions that would ever complete have completed, within the context existing before the 
machine check interrupt. No further interrupt (other than possible additional machine checks) can 
occur as a result of those instructions. 


10.8 Behavior of the PPC405GP Implementation 


All interrupts, except for machine checks, are handled precisely. Precise handling implies that the 
address of the excepting instruction (for synchronous exceptions other than the system call 

_ exception), or the address of the next instruction to be executed (asynchronous exceptions and the 
system call exception), is passed to an interrupt handling routine. Precise handling also implies that 
all instructions that precede the instruction whose address is reported to the interrupt handling routine 
have executed and that no subsequent instruction has begun execution. The specific instruction 
whose address is reported may not have begun execution or may have partially completed, as 
specified for each precise interrupt type. 


Synchronous precise interrupts include most debug event interrupts, program interrupts, instruction 
and data storage interrupts, TLB miss interrupts, system call interrupts, and alignment interrupts. 


Asynchronous precise interrupts include the critical and noncritical external interrupts, and can be 
caused by on-chip peripherals, timer facility interrupts, and some debug events. 


In the PPC405GP, machine checks are handled as critical interrupts (see “Critical and Noncritical 
Interrupts” on page 10-26). If a machine check is associated with an instruction fetch, the critical 
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interrupt save/restore register contains the address of the instruction being fetched when the machine 
check occurred. 


The synchronism of instruction-side machine checks (errors that occur while attempting to fetch an 
instruction from external memory) requires further explanation. Fetch requests to cachable memory 
that miss in the instruction cache unit (ICU) cause an instruction cache line fill (eight words). If any 
instructions (words) in the fetched line are associated with an exception, an interrupt occurs upon 
attempted execution and the cache line is invalidated. 


It is improper to declare an exception when an erroneous word is passed to the fetcher; the address 
could be the result of an incorrect speculative access. It is quite likely that no attempt will be made to 
execute an instruction from the erroneous address. An instruction-side machine check interrupt 
occurs only when execution is attempted. If an exception occurs, execution is suppressed, SRR2 
contains the erroneous address, and the ESR indicates that an instruction-side machine check 
occurred. Although such an interrupt is clearly asynchronous to the erroneous memory access, it is 
handled synchronously with respect to the attempted execution from the erroneous address. 


Except for machine checks, all PPC405GP interrupts are handled precisely: 


e The address of the excepting instruction (for synchronous exceptions, other than the system call 
exception) or the address of the next sequential instruction (for asynchronous exceptions and the 
system call exception) is passed to the interrupt handling routine. 


e All instructions that precede the instruction whose address is reported to the interrupt handling 
routine have completed execution and that no subsequent instruction has begun execution. The 
specific instruction whose address is reported might not have begun execution or might have 
partially completed, as specified for each interrupt type. 


10.9 Interrupt Handling Priorities 


The PPC405GP processor core handles only one interrupt at a time. Multiple simultaneous interrupts 
are handled in the priority order shown in Table 10-3 (assuming, of course, that the interrupt types are 
enabled). 


Multiple interrupts can exist simultaneously, each of which requires the generation of an interrupt. The 
architecture does not provide for simultaneously reporting more than one interrupt of the same class 
(critical or non-critical). Therefore, interrupts are ordered with respect to each other. A masking 
mechanism is available for certain persistent interrupt types. 


When an interrupt type is masked, and an event causes an exception which would normally generate 
an interrupt of that type, the exception persists as a status bit in a register. However, no interrupt is 
generated. Later, if the interrupt type is enabled (unmasked), and the exception status has not been 
cleared by software, the interrupt due to the original exception event is finally generated. 


10-24 PPC405GP User’s Manual Preliminary 


All asynchronous interrupt types can be masked. In addition, certain synchronous interrupt types can 
be masked. 


Table 10-3. Interrupt Handling Priorities 


Critical or 
Priority Interrupt Type Noncritical Causing Conditions 


Machine check—data External bus error during data-side access 
Debug—IAC IAC debug event (in internal debug mode) 


3 Machine check— Critical Attempted execution of instruction for which an external 
instruction bus error occurred during fetch 

4 Debug—EXC, UDE EXC or UDE debug event (in internal debug mode) 

5 Critical interrupt input Active level on the critical interrupt input 


Watchdog timer—first Critical Posting of an enabled first time-out of the watchdog 
time-out timer in the TSR 


7 Instruction TLB Miss Noncritical | Attempted execution of an instruction at an address 
and process ID for which a valid matching entry was not 


found in the TLB . 
Instruction translation is active, execution access to the 
Instruction storage — Noncritical 
TLB_entry([EX] = 0 


translated address is not permitted because 
ZPR[Zn] = 00 in user mode, and an attempt is made to 
execute the instruction 
Instruction storage — Noncritical 
TLB_entry[G] = 1 
Program Noncritical | Attempted execution of illegal instructions, TRAP 
: instruction, privileged instruction in problem state 


System call Execution of the sc instruction 


Data TLB miss Noncritical | Valid matching entry for the effective address and 
process ID of an attempted data access is not found in 
the TLB 

Data storage— Noncritical | Data translation is active and data-side access to the 

ZPR[Zn] = 00 translated address is not permitted because 
ZPR[Zn] = 00 in user mode 

Data storage— Noncritical 

TLB_entry[(WR] = 0 

Data storage— Noncritical 

TLB_entry[U0] = 1 or translated address is not permitted because 
SUOR[UN] = 1 TLB_entry[U0] = 1 or SUOR[Un] = 1 
Alignment Noncritical | dcbz to non-cachable address or write-through 
storage; non-word aligned dceread, lwarx, and stwcx, 
as described in Table 10-13 
15 Debug—BT, DAC, DVC, Critical BT, DAC, DVC, IC, TIE debug event (in internal debug 
: IC, TIE mode) ° 


Data translation is active and write access to the 
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Instruction storage — 
ZPR[Zn] = 00 


Instruction translation is active, execution access to the 
translated address is not permitted because 
TLB_entry[EX] = 0, and an attempt is made to execute 
the instruction 


Instruction translation is active, the page is marked 
guarded, and an attempt is made to execute the 
instruction 


10 
11 


— 
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translated address is not permitted because 
TLB_entry[WR] = 0 


Data translation is active and write access to the 


—_ 


Table 10-3. Interrupt Handling Priorities (continued) 


Critical or 
Priority Interrupt Type Noncritical Causing Conditions 
16 External interrupt input Noncritical | Interrupts from the external interrupt (external to the 
processor core) input 


a Fixed Interval Timer (FIT) Posting of an enabled FIT interrupt in the TSR 


18 Programmable Interval Noncritical | Posting of an enabled PIT interrupt in the TSR 
Timer (PIT) 


10.10 Critical and Noncritical Interrupts 


The PPC405GP processes interrupts as noncritical and critical. Twelve interrupts are defined as 
noncritical: data storage, instruction storage, an active external interrupt input, alignment, program, 
system call, programmable interval timer (PIT), fixed interval timer (FIT), data TLB miss, and 
instruction TLB miss. Five interrupts are defined as critical: machine check interrupts (instruction- and 
data-side), debug interrupts (any of the seven types), interrupts caused by an active critical interrupt 
input, and the first time-out from the watchdog timer. 


When a noncritical interrupt is taken, Save/Restore Register 0 (SRRO) is written with the address of 
the excepting instruction (most synchronous interrupts) or the next sequential instruction to be 
processed (asynchronous interrupts and system call). 


If the PPC405GP was executing a multicycle instruction (multiply, divide, or cache operation), the 
instruction is terminated and its address is written in SRRO. 


Aligned scalar loads/stores that are interrupted do not appear on the PLB. An aligned scalar 
load/store cannot be interrupted after it is requested on the PLB, so the Guarded (G) storage attribute 
does not need to prevent the interruption of an aligned scalar load/store. 


To enhance performance, the DCU can respond to non-cachable load requests by retrieving a line 
instead of a word. This is controlled by CCRO[LWL]. Note, however, that If CCRO[LWL] = 1, and the 
target non-cachable region is also marked as guarded (the G storage attribute is set to 1), that the 
DCU will request on the PLB only those bytes requested by the CPU. 


Load/store multiples, load/store string, and misaligned scalar loads/stores that cross a word boundary 
can be interrupted and restarted upon return from the interrupt handler. 


When load instructions terminate, the addressing registers are not updated. This ensures that the 
instructions can be restarted; if the addressing registers were in the range of registers to be loaded, 
this would be an invalid form in any event. Some target registers of a load instruction may have been 
written by the time of the interrupt; when the instruction restarts, the registers will simply be written 
again. Similarly, some of the target memory of a store instruction may have been written, and is 
written again when the instruction restarts. 


Save/Restore Register 1 (SRR1) is written with the contents of the MSR; the MSR is then updated to 
reflect the new machine context. The new MSR contents take effect beginning with the first instruction 
of the interrupt handling routine. 


Interrupt handling routine instructions are fetched at an address determined by the interrupt type. The 
address of the interrupt handling routine is formed by concatenating the 16 high-order bits of the 
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EVPR and the interrupt vector offset. (A user must initialize the EVPR contents at power-up using an 
mtspr instruction.) 


Table 10-4 shows the interrupt vector offsets for the interrupt types. Note that there can be multiple 
sources of the same interrupt type; interrupts of the same type are mapped to the same interrupt 
vector, regardless of source. In such cases, the interrupt handling routine must examine status 
registers to determine the exact source of the interrupt. . 


At the end of the interrupt handling routine, execution of an rfi instruction forces the contents of SRRO 
and SRR1 to be written to the program counter and the MSR, respectively. Execution then begins at 
the address in the program counter. 


Critical interrupts are processed similarly. When a critical interrupt is taken, Save/Restore 

Register 2 (SRR2) and Save/Restore Register 3 (SRR3) hold the next sequential address to be 
processed when returning from the interrupt, and the contents of the MSR, respectively. At the end of 
the critical interrupt handling routine, execution of an rfci instruction writes the contents of SRR2 and 
SRR3 into the program counter and the MSR, respectively. 


Table 10-4. Interrupt Vector Offsets 


| Offset Interrupt Type interrupt Class Category 
0x0100 | Critical input interrupt Asynchronous precise 10-34 
0x0200 | Machine check—data fl sO Critical =]: 10-35 
Machine check—instruction| = — [Critical — | 10-35 
0x0300 | Data storage interrupt— Synchronous precise Noncritical | 10-36 
MSR[DR]=1 and 
ZPR{[Zn] = 0 or 
TLB_entry[WR] = 0 or 
TLB_entry[UO] = 1 or 
SUOR[UP] = 1 
0x0400 | Instruction storage interrupt | Synchronous precise 10-38 
0x0500 | External interrupt (external | Asynchronous precise | Noncritical | 10-38 
to the processor core) 
0x0600 | Alignment Synchronous precise 10-39 
0x0700_| Program | Synronous precise 10-40 
0x0C00 | System Call Synchronous precise 10-41 
ori000_[PIT______ | Asynchronous presse 
0x1010 Asynchronous precise 10-42 
0x1020 | Watchdog timer Asynchronous precise 10-43 
0x1100 | Data TLB miss Synchronous precise 10-43 
0x1200 | Instruction TLB miss Synchronous precise 10-44 
0x2000 | Debug—BT, DAC, DVC, Synchronous precise Critical 10-44 
IAC, IC, TIE 
Debug—EXC, UDE Asynchronous precise 


10.11 General Interrupt Handling Registers | 
The general interrupt handling registers are the Machine State Register (MSR), SRRO-SRR3, the 


Exception Vector Prefix Register (EVPR), the Exception Syndrome Register (ESR), and the Data 
Exception Address Register (DEAR). 
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10.11.1 Machine State Register (MSR) 


The MSR is a 32-bit register that holds the current context of the PPC405GP. When a noncritical 
interrupt is taken, the MSR contents are written to SRR1; when a critical interrupt is taken, the MSR 
contents are written to SRR3. When an rfi or rfci instruction executes, the contents of the MSR are 


read from SRR1 or SRR3, respectively. 


Programming Note: The rfi and rfci instructions can alter reserved MSR fields. 


The MSR contents can be read into a general purpose register (GPRs) using an mfmsr instruction. 
The contents of a GPR can be written to the MSR using an mtmsr instruction. The MSR[EE] bit may 
be set/cleared atomically using the wrtee or wrteei instructions. 


Figure 10-9 shows the MSR bit definitions and describes the function of each bit. 


CE PR 


WE EE 
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Figure 10-9. Machine State Register (MSR) 


[O12 | Reserved 


13 WE Wait State Enable 
0 The processor is not in the wait state. 
1 The processor is in the wait state. 
14 CE Critical Interrupt Enable 
0 Critical interrupts are disabled. 
1 Critical interrupts are enabled. 


15 Reserved 


16 External Interrupt Enable 
0 Asynchronous interrupts (external to the 
processor core) are disabled. 
1 Asynchronous interrupts are enabled. 


| Reserved 


3 Machine Check Enable 
0 Machine check interrupts are disabled. 
1 Machine check interrupts are enabled. 


17 Problem State 
0 Supervisor state (all instructions 
allowed). 
1 Problem state (some instructions not 
allowed). 
LS 


10-28 PPC405GP User’s Manual 


If MSR[WE] = 1, the processor remains in 
the wait state until an interrupt is taken, a 
reset occurs, or an external debug tool 
clears WE. 


Controls the critical interrupt input and 
watchdog timer first time-out interrupts. 


Controls the non-critical external interrupt 
input, PIT, and FIT interrupts. 


| Reserved 


Preliminary 


Debug Wait Enable 
0 Debug wait mode is disabled. 
1 Debug wait mode is enabled. 


Debug Interrupts Enable 


22 
0 Debug interrupts are disabled. 
1 Debug interrupts are enabled. 


| 23:25 fice ee Reserved 


26 Instruction Relocate 
0 Instruction address translation is 
27 
O Data address translation is disabled. 
1 Data address translation is enabled. 


disabled. 


1 Instruction address translation is 
enabled. 


Data Relocate 


10.11.2 Save/Restore Registers 0 and 1 (SRRO-SRR1) 


SRRO and SRR1 are 32-bit registers that hold the interrupted machine context when a noncritical 
interrupt is processed. On interrupt, SRRO is set to the current or next instruction address and the 
contents of the MSR are written to SRR1. When an rfi instruction is executed at the end of the 
interrupt handler, the program counter and the MSR are restored from SRRO and SRR1, respectively. 


The contents of SRRO and SRR1 can be written into GPRs using the mfspr instruction. The contents 
of GPRs can be written to SRRO and SRR1 using the mtspr instruction. 


Figure 10-10 shows the bit definitions for SRRO. 


Figure 10-10. Save/Restore Register 0 (SRRO) 


0:29 SRRO receives an instruction address when a non-critical interrupt is taken; 
the Program Counter is restored from SRRO when rfi executes. 


-__| Reserved 


Figure 10-11 shows the bit definitions for SRR1. 
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Figure 10-11. Save/Restore Register 1 (SRR1) 


0:31 SRR1 receives a copy of the MSR when an interrupt is taken; the MSR is restored from 
SRR1 when rfi executes. 


10.11.3 Save/Restore Registers 2 and 3 (SRR2—-SRR3) 


SRR2 and SRR3 are 32-bit registers that hold the interrupted machine context when a critical 
interrupt is processed. On interrupt, SRR2 is set to the current or next instruction address and the 
contents of the MSR are written to SRR3. When an rfci instruction is executed at the end of the 
interrupt handler, the program counter and the MSR are restored from SRR2 and SRR3, respectively. 


The contents of SRR2 and SRR3 can be written to GPRs using the mfspr instruction. The contents of 
GPRs can be written to SRR2 and SRR3 using the mtspr instruction. 


Figure 10-12 shows the bit definitions for SRR2. 


0 258037 


Figure 10-12. Save/Restore Register 2 (SRR2) 


SRR2 receives an instruction address when a critical interrupt is taken; the Program 
Counter is restored from SRR2 when rfci executes. 


Po Reserved 


Figure 10-13 shows the bit definitions for SRR3. 
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Figure 10-13. Save/Restore Register 3 (SRR3) 


0:31 SRR3 receives a copy of the MSR when a critical interrupt is taken; the MSR is restored 
from SRR3 when rfci executes. 


Because critical interrupts do not automatically clear MSR[ME], SRR2 and SRR3 can be corrupted by 
a machine check interrupt, if the machine check occurs while SRR2 and SRR contain valid data that 
has not yet been saved by the critical interrupt handler. 


10.11.4 Exception Vector Prefix Register (EVPR) 


The EVPR is a 32-bit register whose high-order 16 bits contain the prefix for the address of an 
interrupt handling routine. The 16-bit interrupt vector offsets (shown in Table 10-4, “Interrupt Vector 
Offsets,” on page 10-27) are concatenated to the right of the high-order 16 bits of the EVPR to form 
the 32-bit address of an interrupt handling routine. : 


The contents of the EVPR can be written to a GPR using the mfspr instruction. The contents of a 
GPR can be written to EVPR using the mtspr instruction. 


Figure 10-14 shows the EVPR bit definitions. 


EVP \ 


0 15] 16 34 


Figure 10-14. Exception Vector Prefix Register (EVPR) 


Exception Vector Prefix 


10.11.5 Exception Syndrome Register (ESR) 


The ESR is a 32-bit register whose bits help to specify the exact cause of various synchronous 
interrupts. These interrupts include instruction and data side machine checks, data storage interrupts, 
and program interrupts, instruction storage interrupts, and data TLB miss interrupts. 
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“Instruction Machine Check Handling” on page 10-35 describes instruction machine checks. “Data 
Storage Interrupt” on page 10-36 describes data storage interrupts. “Program Interrupt” on 
page 10-40 describes program interrupts. 


Although interrupt handling routines are not required to reset the ESR, it is recommended that 
instruction machine check handlers reset the ESR; “Instruction Machine Check Handling” on 
page 10-35 describes why such resets are recommended. 


The contents of the ESR can be written to a GPR using the mfspr instruction. The contents of a GPR 
can be written to the ESR using the mtspr instruction. 


Figure 10-15 shows the ESR bit definitions. 


MCI PIL PTR * DIZ 


PPR DST UOF 


Figure 10-15. Exception Syndrome Register (ESR) 


Machine check—instruction 
0 Instruction machine check did not occur. 
1 Instruction machine check occurred. 


| Reserved 


Program interrupt—illegal 
0 Illegal Instruction error did not occur. 
1 Illegal Instruction error occurred. 


Program interrupt—privileged 
0 Privileged instruction error did not occur. 
1 Privileged instruction error occurred. 


Program interrupt—trap 

0 Trap with successful compare did not 
occur. 

1 Trap with successful compare occurred. 


- | Reserved 


Data storage interrupt—store fault 

0 Excepting instruction was not a store. 

1 Excepting instruction was a store 
(includes debi, dcbz, and dccci). 


Data/instruction storage interrupt—zone 
fault 

0 Excepting condition was not a zone fault. 
1 Excepting condition was a zone fault. 


| Reserved 
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Data storage interrupt—UO0 fault 
0 Excepting instruction did not cause a UO 
fault. 


1 Excepting instruction did cause a UO 
fault. 


a 


In general, ESR bits are set to indicate the type of precise interrupt that occurred; other bits are 
cleared. However, the machine check—instruction (ESR[MCI]) bit behaves differently. Because 
instruction-side machine checks can occur without an interrupt being taken (if MSR[ME].= 0), 
ESR[MCI] can be set even while other ESR-setting interrupts (program, data storage, DTLB-miss) 
occurring. Thus, data storage and program interrupts leave ESR[MCI] unchanged, clear all other ESR 
bits, and set the bits associated with any data storage or program interrupts occurred. Enabled 
instruction-side machine checks (MSR[ME] = 1) set ESR[MCI] and clear the data storage and 
program interrupt bits. 


If a machine check—instruction interrupt occurs but is disabled (MSR[ME] = 0), it sets ESR[MCI] but 
leaves the data storage and program interrupt bits alone. If a machine check—instruction interrupt 
occurs while MSR[ME] = 0, and the instruction upon which the machine check—instruction interrupt 
is occurring also is some other kind of ESR-setting instruction (program, data storage, DTLB-miss, or 
instruction storage interrupt), ESR[MCIl] is set to indicate that a machine check—instruction interrupt 
occurred; the other ESR bits are set or cleared to indicate the other interrupt. These scenarios are 
summarized in Table 10-5 


Table 10-5. ESR Alteration by Various Interrupts 
«Scenario TOES ESRon 


Program interrupt without machine check Set to type Cleared 
interrupt 


Enabled MCI Cleared 


Disabled MCI, no others Unchanged | Unchanged 


Disabled MCI and program interrupt Set to type 


Table 10-6. ESR Alteration by Various Interrupts 


serio ORICA, TER | 
Program interrupt Unchanged 
Data storage interrupt Unchanged Set to Type 


Data TLB miss interrupt Unchanged Cleared 
Machine check—instruction Cleared 
Disabled MCI, no others Unchanged | Unchanged | Unchanged 


Disabled MCI and program interrupt Unchanged | Set to type Cleared 
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10.11.6 Data Exception Address Register (DEAR) 


The DEAR is a 32-bit register that contains the address of the access for which one of the following 
synchronous precise errors occurred: alignment error, data TLB miss, or data storage interrupt. 


The contents of the DEAR can be written to a GPR using the mfspr instruction. The contents of a 
GPR can be written to the DEAR using the mtspr instruction. 


Figure 10-16 shows the DEAR bit definitions. 


Figure 10-16. Data Exception Address Register (DEAR) 


0:31 a Address of Data Error (synchronous) 


10.12 Critical Input Interrupts 


The UICCR can be programmed so that any UIC interrupt can be presented as a critical interrupt 
input to the processor core. See “UIC Trigger Register (UICO_TR)” on page 10-13 for details. Critical 
interrupts are recognized only if enabled by MSR[CE]. 


MSR[CE] also enables the watchdog timer first-time-out interrupt. However, the watchdog interrupt 
has a different interrupt vector than the critical pin interrupt. See “Watchdog Timer Interrupt” on 
page 10-43. 


After detecting a critical interrupt, if no synchronous precise interrupts are outstanding, the 
PPC405GP immediately takes the critical interrupt and writes the address of the next instruction to be 
executed in SRR2. Simultaneously, the contents of the MSR are saved in SRR3. MSR[CE] is reset to 
0 to prevent another critical interrupt or the watchdog timer first time-out interrupt from interrupting the 
critical interrupt handler before SRR2 and SRR3 get saved. MSR[DE] is reset to 0 to disable debug 
interrupts during the critical interrupt handler. 


The MSR is also written with the values shown in Table 10-7, “Register Settings during Critical Input 
Interrupts,” on page 10-35. The high-order 16 bits of the program counter are then loaded with the 
contents of the EVPR and the low-order 16 bits of the program counter are loaded with 0x0100. 
Interrupt processing begins at the address in the program counter. 


Inside the interrupt handling routine, after the contents of SRR2/SRR3 are saved, critical interrupts 
can be enabled again by setting MSR[CE] = 1. 
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Executing an rfci instruction restores the program counter from SRR2 and the MSR from SRR3, and 
execution resumes at the address in the program counter. 


Table 10-7. Register Settings during Critical Input Interrupts 


SRR2 Written with the address of the next instruction to be executed 
SRR3 Written with the contents of the MSR 


MSR WE, CE, EE, PR, DWE, DE,IR, DRe0 
ME< unchanged 


EVPR[0:15] !1 0x0100 


10.13 Machine Check Interrupts 


When an external bus error occurs on an instruction fetch, and execution of that instruction is 
subsequently attempted, a machine check—instruction interrupt occurs. 


When an external bus error occurs while attempting data accesses, a machine check—data interrupt 
occurs. 


When an instruction-side machine check interrupt occurs, the PPC405GP stores the address of the 
excepting instruction in SRR2. When a data-side machine check occurs, the PPC405GP stores the 
address of the next sequential instruction in SRR2. Simultaneously, for all machine check interrupts, 
the contents of the MSR are loaded into SRR3. 


The MSR Machine Check Enable bit (MSR[ME)) is reset to 0 to disable another machine check from 
interrupting the machine check interrupt handling routine. The other MSR bits are loaded with the 
values shown in Table 10-8, “Register Settings during Machine Check—Instruction Interrupts,” on 
page 10-36 and Table 10-9, “Register Settings during Machine Check—Data Interrupts,” on 

page 10-36. The high-order 16 bits of the program counter are then written with the contents of the 
EVPR and the low-order 16 bits of the program counter are written with 0x0200. Interrupt processing 
begins at the new address in the program counter. 


Executing an rfci instruction restores the program counter from SRR2 and the MSR from SRR3, and 
execution resumes at the address in the program counter. 


10.13.1 Instruction Machine Check Handling 


When a machine check occurs on an instruction fetch, and execution of that instruction is 
subsequently attempted, a machine check—instruction interrupt occurs. If enabled by MSR[ME], the 
processor reports the machine check—instruction interrupt by vectoring to the machine check 
handler (EVPR[0:15] I! 0x0200), setting ESR[MCI]. Note that only a bus error can cause a machine 
check—instruction interrupt. Taking the vector automatically clears MSR[ME] and the other MSR 
fields. 


Note that it is improper to declare a machine check—instruction interrupt when the instruction is 
fetched, because the address is possibly the result of an incorrect speculation by the fetcher. It is 
quite likely that no attempt will be made to execute an instruction from the erroneous address. The 
interrupt will occur only if execution of the instruction is subsequently attempted. 


When a machine check occurs on an instruction fetch, the erroneous instruction is never validated in 
the instruction cache unit (ICU). Fetch requests to cachable memory that miss in the ICU cause an 
instruction cache line fill (eight words). If any words in the fetched line are associated with an error, an 
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interrupt occurs upon attempted execution and the cache line is invalidated. If any word in the line is 
in error, the cache line is invalidated after the line fill. 


ESR[MCI] is set, even if MSR[ME] = 0. This means that if a machine check—instruction interrupt 
occurs while running in code in which MSR[ME] is disabled, the machine check—instruction interrupt 
is recorded in the ESR, but no interrupt occurs. Software running with MSR[ME] disabled can sample 
ESR[MCIl] to determine whether at least one machine check—instruction interrupt occurred during 
the disabled execution. : 


If a new machine check—instruction interrupt occurs after MSR[ME] is enabled again, the new 
machine check—instruction interrupt is recorded in ESR[MCIl] and the machine check—instruction 
interrupt handler is invoked. However, enabling MSR[ME] again does not cause a machine Check 
interrupt to occur simply due to the presence of ESR[MCIl] indicating that a machine check— 
instruction interrupt occurred while MSR[ME] was disabled. The machine check—instruction interrupt 
must occur while MSR[ME] is enabled for the machine check interrupt to be taken. Software should, 
in general, clear the ESR bits before returning from a machine check interrupt to avoid any ambiguity 
when handling subsequent machine check interrupts. 


Table 10-8. Register Settings during Machine Check—Instruction Interrupts 


MCl < 1 
All other bits are cleared. 


10.13.2 Data Machine Check Handling 


When a machine check occurs on an data access, a machine check—data interrupt occurs. To 
determine the cause of a machine check, examine the various error reporting registers of the external 
PLB slaves. 


Table 10-9. Register Settings during Machine Check—Data Interrupts 


10.14 Data Storage Interrupt 


The data storage interrupt occurs when the desired access to the effective address is not permitted 
for any of the following reasons: 


e A UO fault: any store to an EA with the UO storage attribute set and CCRO[UOXE] = 1 
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¢ In the problem state with data translation enabled: 


— A zone fault, which is any user-mode storage access (data load, store, icbi, dcbz, dcbst, or 
dcbf) with an effective address with (ZPR field) = 00. (debt and debtst will no-op in this 
situation, rather than cause an interrupt. The instructions debi, dccci, icbt, and iccci, being 
privileged, cannot cause zone fault data storage interrupts.) 


— Data store or dcbz to an effective address with the WR bit clear and (ZPR field) # 11. (The 
privileged instructions debi and dccci are treated as “stores,” but will cause privileged program 
interrupts, rather than data storage interrupts.) 


¢ Inthe supervisor state with data translation enabled: 


— Data store, debi, dcbz, or dcecci to an effective address with the WR bit clear and (ZPR field) 
other than 11 or 10. 


Programming Note: The icbi, icbt, and iccci instructions are treated as loads from the 
addressed byte with respect to address translation and protection. Instruction cache operations 
use MSR[DR], not MSR[IR], to determine translation of their operands. Instruction storage 
interrupts and Instruction-side TLB Miss Interrupts are associated with the fetching of instructions, 
not with the execution of instructions. Data storage interrupts and data TLB miss interrupts are 
associated with the execution of instruction cache operations. 


When a data storage interrupt is detected, the PPC405GP suppresses the instruction causing the 
interrupt and writes the instruction address in SRRO. The Data Exception Address Register (DEAR) is 
loaded with the data address that caused the access violation. ESR bits are loaded as shown in 
Table 10-10, “Register Settings during Data Storage Interrupts,” on page 10-37 to provide further 
information about the error. The current contents of the MSR are loaded into SRR1, and MSR bits are 
then loaded with the values shown in Table 10-10. 


The high-order 16 bits of the program counter are then loaded with the contents of the EVPR and the 
low-order 16 bits of the program counter are loaded with 0x0300. Interrupt processing begins at the 
new address in the program counter. Executing the return from interrupt instruction (rfi) restores the 
contents of the program counter and the MSR from SRRO and SRR, respectively, and the 
PPC405GP resumes execution at the new program counter address. 


For instructions that can simultaneously generate program interrupts (privileged instructions executed 
in Problem State) and data storage interrupts, the program interrupt has priority. 


Table 10-10. Register Settings during Data Storage Interrupts 


SRRO Written with the EA of the instruction causing the data storage interrupt 
SRR1 Written with the value of the MSR at the time of the interrupt 


WE, EE, PR, DWE, IR, DRO 

CE, ME, DE < unchanged 
PC EVPR{[0:15] 1 0x0300 
DEAR Written with the EA of the failed access 


ESR DST < 1 if excepting operation is a store (includes debi and dcbz) 
DIZ < 1 if access failure caused by a zone protection fault (ZPR[Zn] = 00 in 
user mode) 

UOF <1 if access failure caused by a UO fault (the UO storage attribute is 
set and CCRO[UOXE] = 1) 

MCI <— unchanged 

All other bits are cleared. 
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10.15 Instruction Storage Interrupt 


The instruction storage interrupt is generated when instruction translation is active and execution is 
attempted for an instruction whose fetch access to the effective address is not permitted for any of the 
following reasons: 


¢ In Problem State: 


Instruction fetch from an effective address with (ZPR field) = 00. 

Instruction fetch from an effective address with the EX bit clear and (ZPR field) # 11. 
Instruction fetch from an effective address contained within a Guarded region (G=1). 
¢ In Supervisor State: 


Instruction fetch from an effective address with the EX bit clear and (ZPR field) other than 11 or 
10. 


Instruction fetch from an effective address contained within a Guarded region (G=1). 
SRRO will save the address of the instruction causing the instruction storage interrupt. 
ESR is set to indicate the following conditions: 


¢ If ESR[DIZ] = 1, the excepting condition was a zone fault: the attempted execution of an instruction 
address fetched in user-mode with (ZPR field) = 00. 


¢ If ESR[DIZ] = 0, then the excepting condition was either EX = 0 or G = 1. 


The interrupt is precise with respect to the attempted execution of the instruction. Program flow 
vectors to EVPR[0:15] || 0x0400. 


The following registers are modified to the specified values: 


Table 10-11. Register Settings during Instruction Storage Interrupts 


SRRO Set to the EA of the instruction for which execute access was not permitted 
SRRI1 Set to the value of the MSR at the time of the interrupt 


MSR WE, EE, PR, DWE, IR, DR — 0 
CE, ME, DE < unchanged 
EVPRJ0:15] Il 0x0400 


ESR DIZ < 1If access failure due to a zone protection fault (ZPR[Zn] = 00 in user 
mode) 

Note: If ESR[DIZ] is not set, the interrupt occurred because TBL_entry[EX] 
was Clear in an otherwise accessible zone, or because of an instruction 
fetch from a storage region marked as guarded. See “Exception Syndrome 
Register (ESR)” on page 10-31 for details of ESR operation. 

MCI <— unchanged . 
All other bits are cleared. 


10.16 External Interrupt 
External interrupts (external to the processor core) are triggered by active levels for non-critical 


interrupts in the UIC. All external interrupting events are presented to the processor as a single 
external interrupt. External interrupts are enabled or disabled by MSR[EE]. 
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Programming Note: MSR[EE] also enables PIT and FIT interrupts. However, after timer 
interrupts, control passes to different interrupt vectors than for the interrupts discussed in the 
preceding paragraph. Therefore, these timer interrupts are described in “Programmable Interval 
Timer (PIT) Interrupt” on page 10-41 and “Fixed Interval Timer (FIT) Interrupt” on page 10-42. 


10.16.1 External Interrupt Handling 


When MSR[EE] = 1 (external interrupts are enabled), a noncritical external interrupt occurs, and this 
interrupt is the highest priority interrupt condition, the processor immediately writes the address of the 
next sequential instruction into SRRO. Simultaneously, the contents of the MSR are saved in SRR1. 


When the processor takes a noncritical external interrupt, MSR[EE] is set to 0. This disables other 
external interrupts from interrupting the interrupt handler before SRRO and SRRi are saved. The 
MSR is also written with the other values shown in Table 10-12, “Register Settings during External 
Interrupts,” on page 10-39. The high-order 16 bits of the program counter are written with the contents 
of the EVPR and the low-order 16 bits of the program counter are written with Ox0500. Interrupt 
processing begins at the address in the program counter. 


Executing an rfi instruction restores the program counter from SRRO and the MSR from SRR1, and 
execution resumes at the address in the program counter. 


Table 10-12. Register Settings during External Interrupts 


SRRO Written with the address of the next sequential instruction 
SRR Written with the contents of the MSR 


MSR WE, EE, PR, DWE, IR, DR — 0 
CE, ME, DE < unchanged 


EVPR([0:15] !| 0x0500 


10.17 Alignment Interrupt 


Alignment interrupts are caused by debz instructions to non-cachable or write-through storage and. 
Table 10-13 summarizes the instructions and conditions causing alignment interrupts. 


Table 10-13. Alignment Interrupt Summary 


Instructions Causing Alignment 
Interrupts Conditions 


dbz EA in non-cachable or write-through storage 
dcread, lwarx, stwex. EA not word-aligned 


Execution of an instruction causing an alignment interrupt is prohibited from completing. SRRO is 
written with the address of that instruction and the current contents of the MSR are saved into SRR1. 
The DEAR is written with the address that caused the alignment error. The MSR bits are written with 
the values shown in Table 10-14, “Register Settings during Alignment Interrupts,” on page 10-40. The 
high-order 16 bits of the program counter are written with the contents of the EVPR and the low-order 
16 bits of the program counter are written with Ox0600. Interrupt processing begins at the new 
address in the program counter. 
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Executing an rfi instruction restores the program counter from SRRO and the MSR from SRRi1, and 
execution resumes at the address in the program counter 


Alignment interrupts cannot be disabled. To avoid overwrites of SRRO and SRRi1 by alignment 
interrupts that occur within a handler, interrupt handlers should save these registers as soon as 
possible. 


Table 10-14. Register Settings during Alignment Interrupts 


SRRO Written with the address of the instruction causing the alignment interrupt 
SRR1 Written with the contents of the MSR 


MSR WE, EE, PR, DWE, IR, DR — 0 
CE, ME, DE < unchanged 
EVPR[0:15] Il Ox0600 
DEAR Written with the address that caused the alignment violation 


10.18 Program Interrupt 


Program interrupts are caused by attempting to execute: 


¢ An illegal instruction 

¢ A privileged instruction while in the problem state 

e Executing a trap instruction with conditions satisfied 

The ESR bits that differentiate these situations are listed and described in Table 10-15. Whena 


program interrupt occurs, the appropriate bit is set and the others are cleared. These interrupts are 
not maskable. 


Table 10-15. ESR Usage for Program Interrupts 


ESR[PIL} | illegal instruction Opcode not recognized 
ESR[PPR] | Privileged instruction Attempt to use a privileged instruction in the problem state 
ESRIPTR] Excepting instruction is a trap 


The program interrupt handler does not need to reset the ESR. 


When one of the following occurs, the PPC405GP does not execute the instruction, but writes the 
address of the excepting instruction into SRRO: 


e Attempted execution of a privileged instruction in problem state 


° Attempted execution of an illegal instruction (including memory management instructions when 
memory management is disabled 


Trap instructions can be used as a program interrupt or a debug event, or both (see “Debug Events” 
on page 12-16 for information about debug events). When a trap instruction is detected as a program 
interrupt, the PPC405GP writes the address of the trap instruction into SRRO. See tw on page 24-190 
and twi on page 24-193 (both in Chapter 24, “Instruction Set”) for a detailed discussion of the 
behavior of trap instructions with various interrupts enabled. 
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After any program interrupt, the contents of the MSR are written into SRR1 and the MSR bits are 
written with the values shown in Table 10-16. The high-order 16 bits of the program counter are 
written with the contents of the EVPR; the low-order 16 bits of the program counter are written with 
0x0700. Interrupt processing begins at the new address in the program counter. 


Executing an rfi instruction restores the program counter from SRRO and the MSR from SRR1, and 
execution resumes at the address in the program counter. 


Table 10-16. Register Settings during Program Interrupts 


SRRO Written with the address of the excepting instruction 
SRR1 Written with the contents of the MSR 


WE, EE, PR, DWE, IR, DR — 0 : 
CE, ME, DE <— unchanged 


P EVPR[0:15] Il 0x0700 


Cc 
ESR Written with the type of program interrupt. (See Table 10-15) 
MCI <— unchanged 
All other bits are cleared. 


10.19 System Call Interrupt 


System call interrupts occur when a sc instruction is executed. The PPC405GP writes the address of 
the instruction following the sc into SRRO. The contents of the MSR are written into SRR1 and the 
MSR bits are written with the values shown in Table 10-17. The high-order 16 bits of the program 
counter are then written with the contents of the EVPR and the low-order 16 bits of the program 
counter are written with OxOCOO. Interrupt processing begins at the new address in the program 
counter. 


Executing an rfi instruction restores the program counter from SRRO and the MSR from SRR1, and 
execution resumes at the address in the program counter. 


Table 10-17. Register Settings during System Call Interrupts 


SRRO Written with the address of the instruction following the sc instruction 


SRR1 Written with the contents of the MSR 


MSR AP, APE, WE, EE, PR, DWE, IR, DR — 0 
CE, ME, DE < unchanged 


EVPR[0:15] I! OxOC00 


10.20 Programmable Interval Timer (PIT) Interrupt 


For a discussion of the PPC405GP timer facilities, see Chapter 11, “Timer Facilities.” The PIT is 
described in “Programmable Interval Timer (PIT)” on page 11-4. 


If the PIT interrupt is enabled by TCR[PIE] and MSR[EE], the PPC405GP initiates a PIT interrupt after 
detecting a time-out from the PIT. Time-out is detected when, at the beginning of a clock cycle, 
TSR[PIS] = 1. (This occurs on the cycle after the PIT decrements on a PIT count of 1.) The 
PPC405GP immediately takes the interrupt. The address of the next sequential instruction is saved in 
SRRO; simultaneously, the contents of the MSR are written into SRR1 and the MSR is written with the 
values shown in Table 10-18. The high-order 16 bits of the program counter are then written with the 
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contents of the EVPR and the low-order 16 bits of the program counter are written with 0x1000. 
Interrupt processing begins at the address in the program counter. 


To clear a PIT interrupt, the interrupt handling routine must clear the PIT interrupt bit, TSR[PIS]. 
Clearing is performed by writing a word to TSR, using an mtspr instruction, that has 1 in bit positions 
to be cleared and 0 in all other bit positions. The data written to the TSR is not direct data, but a mask; 
a 1 clears the bit and 0 has no effect. 


Executing an rfi instruction restores the program counter from SRRO and the MSR from SRR1, and 
execution resumes at the address in the program counter. 


Table 10-18. Register Settings during Programmable Interval Timer Interrupts 


SRRO Written with the address of the next instruction to be executed 
SRR1 Written with the contents of the MSR 
MSR 


WE, EE, PR, DWE, IR, DR — 0 
CE, ME, DE < unchanged 
EVPR[O:15] Il 0x1000 
Prise 


10.21 Fixed Interval Timer (FIT) Interrupt 


For a discussion of the PPC405GP timer facilities, see Chapter 11, “Timer Facilities.” The FIT is 
described in “Fixed Interval Timer (FIT) Interrupt” on page 10-42. 


If the FIT interrupt is enabled by TCR[FIE] and MSR[EE], the PPC405GP initiates a FIT interrupt after 
detecting a time-out from the FIT. Time-out is detected when, at the beginning of a clock cycle, 
TSRI[FIS] = 1. (This occurs on the second cycle after the 0 — 1 transition of the appropriate time-base 
bit.) The PPC405GP immediately takes the interrupt. The address of the next sequential instruction is 
written into SRRO; simultaneously, the contents of the MSR are written into SRR1 and the MSR is 
written with the values shown in Table 10-19. The high-order 16 bits of the program counter are then 
written with the contents of the EVPR and the low-order 16 bits of the program counter are written 
with 0x1010. Interrupt processing begins at the address in the program counter. 


To clear a FIT interrupt, the interrupt handling routine must clear the FIT interrupt bit, TSR[FIS]. 
Clearing is performed by writing a word to TSR, using an mtspr instruction, that has 1 in any bit 
positions to be cleared and 0 in all other bit positions. The data written to the TSR is not direct data, 
but a mask; a 1 clears a bit and 0 has no effect. 


Executing an rfi instruction restores the program counter from SRRO and the MSR from SRR1, and 
execution resumes at the address in the program counter. 


Table 10-19. Register Settings during Fixed Interval Timer Interrupts 


SRRO Written with the address of the next sequential instruction 
SRR1 Written with the contents of the MSR 


WE, EE, PR, DWE, IR, DR <0 
CE, ME, DE <- unchanged. 


EVPR([0:15] || 0x1010 
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10.22 Watchdog Timer Interrupt 


For a general description of the PPC405GP timer facilities, see Chapter 11, “Timer Facilities.” The 
watchdog timer (WDT) is described in “Watchdog Timer’ on page 11-6. 


If the WDT interrupt is enabled by TCR[WIE] and MSR[CE], the PPC405GP initiates a WDT interrupt 
after detecting the first WDT time-out. First time-out is detected when, at the beginning of a clock 
cycle, TSR[WIS] = 1. (This occurs on the second cycle after the O—>1 transition of the appropriate 
time-base bit while TSR[ENW] = 1 and TSR[WIS] = 0.) The PPC405GP immediately takes the 
interrupt. The address of the next sequential instruction is saved in SRR2; simultaneously, the 
contents of the MSR are written into SRR3 and the MSR is written with the values shown in 

Table 10-20. The high-order 16 bits of the program counter are then written with the contents of the 
EVPR and the low-order 16 bits of the program counter are written with 0x1020. Interrupt processing 
begins at the address in the program counter. 


To clear the WDT interrupt, the interrupt handling routine must clear the WDT interrupt bit TSR[WIS)]. 
Clearing is done by writing a word to TSR (using mtspr), with a 1 in any bit position that is to be 
cleared and 0 in all other bit positions. The data written to the status register is not direct data, but a 
mask; a 1 causes the bit to be cleared, and a 0 has no effect. 


Executing the return from critical interrupt instruction (rfci) restores the contents of the program 
counter and the MSR from SRR2 and SRR3, respectively, and the PPC405GP resumes execution at 
the contents of the program counter. 


Table 10-20. Register Settings during Watchdog Timer Interrupts 


SRR2 Written with the address of the next sequential instruction 
SRR3 Written with the contents of the MSR 


MSR WE, CE, EE, PR, DE, DWE, IR, DR< 0 
ME < unchanged 


EVPR[0:15] !I 0x1020 


10.23 Data TLB Miss Interrupt 


The data TLB miss interrupt is generated if data translation is enabled and a valid TLB entry matching 
the EA and PID is not present. The address of the instruction generating the untranslatable effective 
data address is saved in SRRO. In addition, the hardware also saves the data address (that missed in 
the TLB) in the DEAR. : 


The ESR is set to indicate whether the excepting operation was a store (includes debz, debi, decci). 
The interrupt is precise. Program flow vectors to EVPR[0:15] Il 0x1100. 


The following registers are modified to the values specified in Table 10-21. 


Table 10-21. Register Settings during Data TLB Miss Interrupts 


SRRO Set to the address of the instruction generating the effective address for 
which no valid translation exists. 


SRR1 Set to the value of the MSR at the time of the interrupt 
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Table 10-21. Register Settings during Data TLB Miss Interrupts (continued) | 


WE, EE, PR, DWE, IR, DR <0 
CE, ME, DE < unchanged 
EVPR[(O0:15] Il 0x1100 


DEAR Set to the effective address of the failed access 


MSR 
DST < 1 if excepting operation is a store operation (includes debi, debz, 


and dccci). 
MCI < unchanged 

Programming Note: Data TLB miss interrupts can happen whenever data translation is enabled. 

Therefore, ensure that SRRO and SRR1 are saved before enabling translation in an interrupt 


All other bits are cleared. 
handler. 


10.24 Instruction TLB Miss Interrupt 


The instruction TLB miss interrupt is generated if instruction translation is enabled and execution is 
attempted for an instruction for which a valid TLB entry matching the EA and PID for the instruction 
fetch is not present. The instruction whose fetch caused the TLB miss is saved in SRRO. 


The interrupt is precise with respect to the attempted execution of the instruction. Program flow 
vectors to EVPR[0:15 || 0x1200. 


The following are modified to the values specified in Table 10-22 . 


Table 10-22. Register Settings during Instruction TLB Miss Interrupts 


SRRO Set to the address of the instruction for which no valid translation exists. 
SRR1 Set to the value of the MSR at the time of the interrupt 


MSR AP, APE, WE, EE, PR, DWE, IR, DR — 0 
CE, ME, DE < unchanged 


EVPR[O:15] il 0x1200 


Programming Note: Instruction TLB miss interrupts can happen whenever instruction translation 
is active. Therefore, insure that SRRO and SRR?1 are saved before enabling translation in an 
interrupt handler. 


10.25 Debug Interrupt 


Debug interrupts can be either synchronous or asynchronous. These debug events generate 
synchronous interrupts: branch taken (BT), data address compare (DAC), data value compare (DVC), 
instruction address compare (IAC), instruction completion (IC), and trap instruction (TIE). The 
exception (EXC) and unconditional (UDE) debug events generate asynchronous interrupts. See 
“Debug Events” on page 12-16 for more information about debug events. 
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For debug events, SRR2 is written with an address, which varies with the type of debug event, as 
shown in Table 10-23. 


Table 10-23. SRR2 during Debug Interrupts 


Debug Event Address Saved in SRR2 
BT 


Address of the instruction causing the event 


Address of the instruction following the instruction that causing the event 


Interrupt vector address of the initial exception that caused the exception debug event 


XC 
UDE Address of next instruction to be executed at time of UDE 


E 


SRR3 is written with the contents of the MSR and the MSR is written with the values shown in 

Table 10-24, “Register Settings during Debug Interrupts,” on page 10-45. The high-order 16 bits of the 
program counter are then written with the contents of the EVPR; the low-order 16 bits of the program 
counter are written with 0x2000. Interrupt processing begins at the address in the program counter. 


Executing an rfci instruction restores the program counter from SRR2 and the MSR from SRR3, and 
execution resumes at the address in the program counter. 


Table 10-24. Register Settings during Debug Interrupts 


ME < unchanged 


SRR2 
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Chapter 11. Timer Facilities 


The PPC405GP provides four timer facilities: a time base, a Programmable Interval Timer (PIT), a 
fixed interval timer (FIT), and a watchdog timer. The PIT is a Special Purpose Register (SPR). These 
facilities, which are driven by the same base clock, can, among other things, be used for: 


¢ Time-of-day functions 

¢ Data logging functions 

e Peripherals requiring periodic service 
e Periodic task switching 


Additionally, the watchdog timer can help a system to recover from faulty hardware or software. 


Figure 11-1 shows the relationship of the timers and the clock source to the time base. 


CPCO_CR1[CETE] = 0 


TBL (32 bits) 
CPU Clock 


e 


0 
TmrClk ———— 
CPCO_CR1[CETE] = 1 


Bit3 (229 clocks) 
Bit7 (225 clocks) 


Watchdog Timer Events 
Bit 11. (221 clocks) : 
Bit 15 (2'” clocks) 
Bit 11 (221 clocks) 
Bit15 (2'” clocks) 
FIT Events 


Bit19 (2° clocks) 
Bit23 (29 clocks) 


PIT (Decrementer) 


(32 bits) 


Zero Detect } PIT Events 


Figure 11-1. Relationship of Timer Facilities to the Time Base 
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11.1 Time Base 


The PPC405GP implements a 64-bit time base as required in The PowerPC Architecture. The time 
base, which increments once during each period of the source clock, provides a time reference. The 
source clock is either the CPU clock or an external clock connected to the TmrClk input. The CETE 
field of Chip Control Register 1 (CPCO_CR1[CETE]) selects the clock source. 


Read access to the time base is through the mftb instruction. mftb provides user-mode read-only 
access to the time base. The TBR numbers (0x10C and 0x10D; TBL and TBU, respectively) that 
specify the time base registers to mftb are not SPR numbers. However, the PowerPC Architecture 
allows an implementation to handle mftb as mfspr. Accordingly, these register numbers cannot be 
used for other SPRs. PowerPC compilers cannot use mftb with register numbers other than those 
specified in the PowerPC Architecture as read-access time base registers (0x10C and 0x10D). 


Write access to the time base, using mtspr, is privileged. Different register numbers are used for read 
access and write access. Writing the time base is accomplished by using SPR 0x11C and SPR 
0x11D (TBL and TBU, respectively) as operands for mtspr. 


The period of the 64-bit time base is approximately 2925 years for a 200 MHz clock source. The time 
base does not generate interrupts, even when it wraps. For most applications, the time base is set 
once at system reset and only read thereafter. Note that the FIT and the watchdog timer (discussed 
below) are driven by 0-1 transitions of bits from the TBL. Transitions caused by software alteration of 
TBL have the same effect as transitions caused by normal incrementing of the time base. 


Figure 11-2 illustrates the TBL. 


Figure 11-2. Time Base Lower (TBL) 


0:31 fl Time Base Lower Current count; low-order 32 bits of time 
base. 
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Figure 11-3 illustrates the TBU. 


Figure 11-3. Time Base Upper (TBU) 


0:31 Lo Time Base Upper Current count, high-order 32 bits of time 
base. 


Table 11-1 summarizes the TBRs, instructions used to access the TBRs, and access restrictions. 


Table 11-1. Time Base Access 


Register 
Number | Access Restrictions 


mftbu RT 0x10D Read-only 
Extended mnemonic for 


TBU | mftb RT,.TBU 
Upper 


32 bits | Mttbu RS 0x11D Privileged; write-only 
Extended mnemonic for 
mtspr TBU,RS 


mftb RT 0x10C Read-only 
TBL Extended mnemonic for 
mftb RT,TBL 
Lower 


32 bits | Mttbl Privileged; write-only 
Extended mnemonic for 
mtspr TBL,RS 


11.1.1 Reading the Time Base 


The following code provides an example of reading the time base. mftb moves the low-order 32 bits 
of the time base to a GPR; mftbu moves the high-order 32 bits of the time base to a second GPR. 


loop: 
mftbu Rx # load from TBU 
mftb Ry # load from TBL 
mftbu Rz # load from TBU 
cmpw Rz, Rx # see if old = new 
bne loop # loop/reread if rollover occurred 


The comparison and loop ensure that a consistent pair of values is obtained. 


11.1.2 Writing the Time Base 


The following code provides an example of writing the time base. Writing the time base is privileged. 
mttbl moves the contents of a GPR to the low-order 32 bits of the time base; mttbu moves the 
contents of a second GPR to the high-order 32 bits of the time base. 
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Iwz Rx, upper # load 64-bit time base value into Rx and Ry 
Iwz Ry, lower 


li Rz, 0 

mttbl Rz # force TBL to 0 to avoid rollover while writing TBU 
mttbu Rx # set TBU 

mttbl Ry # set TBL 


11.2 Programmable Interval Timer (PIT) 


The PIT is a 32-bit SPR that decrements at the same rate as the time base. The PIT is read and 
written using mfspr and mtspr, respectively. Writing to the PIT also simultaneously writes to a hidden 
reload register. Reading the PIT using mfspr returns the current PIT contents; the hidden reload 
register cannot be read. When a non-zero value is written to the PIT, it begins to decrement. A PIT 
event occurs when a decrement occurs on a PIT count of 1. When a PIT event occurs, the following 
occurs: 


1. If the PIT is in auto-reload mode (the ARE field of the Timer Control Register (TCR) is 1), the PIT is 
loaded with the last value an mtspr wrote to the PIT. A decrement from a PIT count of 1 
immediately causes a reload; no intermediate PIT content of 0 occurs. 


If the PIT is not in auto-reload mode (TCR[ARE] = 0), a decrement from a PIT count of 1 simply 
causes a PIT content of 0. 


2. TSR[PIS] is set to 1. 


3. If enabled (TCR[PIE] = 1 and the EE field of the Machine State Register (MSR) is 1), a PIT 
interrupt is taken. See “Programmable Interval Timer (PIT) Interrupt” on page 10-41 for details of 
register behavior during a PIT interrupt. 


The interrupt handler should use software to reset the PIS field of the Timer Status Register (TSR). 
This is done by using mtspr to write a word to the TSR having a 1 in TSR[PIS] and any other bits to 
be cleared, and a 0 in all other bits. The data written to the TSR is not direct data, but a mask. A 1 
clears a bit; a 0 has no effect. 


Using mtspr to force the PIT to 0 does not cause a PIT interrupt. However, decrementing that was 
ongoing at the instant of the mtspr instruction can cause the appearance of an interrupt. To eliminate 
the PIT as a source of interrupts, write a O to TCR[PIE], the PIT interrupt enable bit. 


To eliminate all PIT activity: 
1. Write a 0 to TCR[PIE]. This prevents PIT activity from causing interrupts. 
2. Write a 0 to TCR[ARE]. This disables the PIT auto-reload feature. 


3. Write zeroes to the PIT to halt PIT decrementing. Although this action does not cause a pit PIT 
interrupt to become pending, a near-simultaneous decrement to 0 might have done so. 


4. Write a 1 to TSR[PIS] (PIT Interrupt Status bit). This clears TSR[PIS] to 0 (see “Timer Status 
Register (TSR)” on page 11-8). This also clears any pending PIT interrupt. Because the PIT stops 
decrementing, no further PIT events are possible. 


If the auto-reload feature is disabled (TCR[ARE] = 0) when the PIT decrements to 0, the PIT remains 
0 until software uses mtspr to reload it. 


After a reset, TCR[ARE] = 0, which disables the auto-reload feature. 
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Figure 11-4 illustrates the PIT. 


Figure 11-4. Programmable Interval Timer (PIT) 


0:31 a Programmed interval remaining Number of clocks remaining until the PIT 
event 


11.2.1 Fixed Interval Timer (FIT) 


The FIT provides timer interrupts having a repeatable period. The FIT is functionally similar to an 
auto-reload PIT, except that only a smaller fixed selection of interrupt periods are available. 


The FIT exception occurs on 0-1 transitions of selected bits from the time base, as shown in 
Table 11-2. 


Table 11-2. FIT Controls 


Period Period 
=< TBL Bit (Time Base Clocks) | (200 Mhz Clock) 


| clocks | clocks 2. | 2.56ysec | 2.56ysec 


The TSRI[FIS] field logs a FIT exception as a pending interrupt. A FIT interrupt occurs if TCR[FIE] and 
MSR[EE] are enabled at the time of the FIT exception. “Fixed Interval Timer (FIT) Interrupt” on 
page 10-42 describes register settings during a FIT interrupt. 


The interrupt handler should reset TSR[FIS]. This is done by using mtspr to write a word to the TSR 
having a 1 in TSR[FIS] and any other bits to be cleared, and a 0 in all other bits. The data written to 
the TSR is not direct data, but a mask. A 1 clears a bit and a 0 has no effect. 
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11.3 Watchdog Timer 


The watchdog timer aids system recovery from software or hardware faults. 


A watchdog timeout occurs on 0-41 transitions of a selected bit from the time base, as shown in the 
following table. 


Table 11-3. Watchdog Timer Controls 


Period Period 
=< TBL Bit (Time Base Clocks) | (200 MHz Clock) 


217 clocks | 0.655msec | 655 | 0.655msec | 
0, ie an 2°' clocks 10.49 msec 


lf a watchdog timeout occurs while TSR[WIS] = 0 and TSR[ENW] = 1, a watchdog interrupt occurs if 
the interrupt is enabled by TCR[WIE] and MSR[CE]. “Watchdog Timer’ on page 11-6 describes 
register behavior during a watchdog interrupt. 


The interrupt handler should reset the TSR[WIS] bit. This is done by using mtspr to write a word to 
the TSR having a 1 in TSR[WIS] and any other bits to be cleared, and a 0 in all other bits. The data 
written to the TSR is not direct data, but a mask. A 1 clears a bit and a 0 has no effect. 


If a watchdog timeout occurs while TSR[WIS] = 1 and TSR[ENW] = 1, a hardware reset occurs if 
enabled by a non-zero value of TCR[WRC]. In other words, a reset can occur if a watchdog timeout 
occurs while a previous watchdog timeout is pending. The assumption is that TSR[WIS] was not 
cleared because the processor could not execute the watchdog handler, leaving reset as the only way 
to restart the system. Note that after TCR[WRC] is set to a non-zero value, it cannot be reset by 
software. This prevents errant ele Heb disabling the watendog: timer reset capability. After a 
reset, the initial value of TCR[WRC] = 
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Figure 11-5 describes the watchdog state machine. In the figure, numbers in parentheses refer to 
descriptions of operating modes that follow the table. 


Time-out, no interrupt 


Watchdog timeout occurred, watchdog 
interrupt will occur if enabled 


(3) SW Loop 


(2) Interrupt 
Handler 


Value of TRC[WRC] 


00 No reset will occur 
Ot Core reset 
10 Chip reset 
11 System reset 


Time-out 


Figure 11-5. Watchdog Timer State Machine 


Enable Next Watchdog 
Watchdog Timer Status 
TSR[ENW] TSR[WIS] Action When Timer Interval Expires 


a 
SENET, 


1 Set TSRIWIS] = 1. 
If TCR[WIE] = 1 and MSR[CE] = 1, then interrupt. 


Cause the watchdog reset action specified by 
TCR[WRC]. 

On reset, copy current TCR[WRC] to TSR[WRS] and 
clear TCR[WRC], disabling the watchdog timer. 


The controls described in Figure 11-5 imply three different ways of using the watchdog timer. The 
modes assume that TCR[WRC] was set to allow processor reset by the watchdog timer: 


1. Always take a pending watchdog interrupt, and never attempt to prevent its occurrence. (This mode 
is described in the preceding text.) 


a. Clear TSR[WIS] in the watchdog timer handler. 
b. Never use TSR[ENW). 


2. Always take a pending watchdog interrupt, but avoid it whenever possible by delaying a reset untila 
second watchdog timer occurs. 


This assumes that a recurring code loop of known maximum duration exists outside the interrupt 
handlers, or that a FIT interrupt handler is operational. One of these mechanisms clears 
TSR[ENW] more frequently than the watchdog period. 


a. Clear TSR[ENW] to 0 in loop or in FIT interrupt handler. 
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To clear TSR[ENW], use mtspr to write a 1 to TSR[ENW] (and to any other bits that are to be 
cleared), with 0 in all other bit locations. 


b. Clear TSR[WIS] in watchdog timer handler. 


It is not expected that a watchdog interrupt will occur every time, but only if an exceptionally 
high execution load delays clearing of TSR[ENW] in the usual time frame. 


3. Never take a watchdog interrupt. 


This assumes that a recurring code loop of reliable duration exists outside the interrupt handlers, or 
that a FIT interrupt handler is operational. This method only guarantees one watchdog timeout 
period before a reset occurs. 


a. Clear TSR[WIS] in the loop or in FIT handler. 
b. Never use TSR[ENW] but have it set. 


11.4 Timer Status Register (TSR) 


The TSR can be accessed for read or write-to-clear. 


Status registers are generally set by hardware and read and cleared by software. The mfspr 
instruction reads the TSR. Clearing the TSR is performed by writing a word to the TSR, using mtspr, 
having a 1 in all fields to be cleared and a 0 in all other fields. The data written to the TSR is not direct 
data, but a mask. A 1 clears the field and a 0 has no effect. 


ENW WRS_ FIS 


WIS PIS 


Figure 11-6. Timer Status Register (TSR) 


Enable Next Watchdog Software must reset TSR[ENW] = 0 after 
0 Action on next watchdog event is to set each watchdog timer event. 

TSR[ENW] = 1. 
1 Action on next watchdog event is 

governed by TSR[WIS]. 


Watchdog Interrupt Status 
0 No Watchdog interrupt is pending. 
1 Watchdog interrupt is pending. 


Watchdog Reset Status 

00 No Watchdog reset has occurred. 

01 Core reset was forced by the watchdog. 

10 Chip reset was forced by the watchdog. 

11 System reset was forced by the 
watchdog. , 


PIT Interrupt Status 
0 No PIT interrupt is pending. 
1 PIT interrupt is pending. 
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FIT Interrupt Status 
0 No FIT interrupt is pending. 


1 FIT interrupt is pending. 


Reserved 


11.5 Timer Control Register (TCR) 


The TCR controls PIT, FIT, and watchdog timer operation. 


The TCR[WRC] field is cleared to 0 by all processor resets. (Chapter 8, “Reset and Initialization,” 
describes the types of processor reset.) This field is set only by software. However, hardware does 
not allow software to clear the field after it is set. After software writes a 1 to a bit in the field, that bit 
remains a 1 until any reset occurs. This prevents errant code from disabling the watchdog timer reset 


function. 


All processor resets clear TCR[ARE] to 0, disabling the auto-reload feature of the PIT. 


WP WIE FP FIE 


WRC PIE ARE 


Ost 284 e BRNO ae ee et 


Figure 11-7. Timer Control Register (TCR) 


Watchdog Period 
00 217 clocks 
01 221 clocks 
10 225 clocks 
11 229 clocks 


Watchdog Reset Control 

00 No Watchdog reset will occur. 

01 Core reset will be forced by the 
Watchdog. 

10 Chip reset will be forced by the 


Watchdog. 
11 System reset will be forced by the 
Watchdog. 


Watchdog Interrupt Enable 

0 Disable watchdog interrupt. 
1 Enable watchdog interrupt. 
PIT Interrupt Enable 

0 Disable PIT interrupt. 

1 Enable PIT interrupt. 


Preliminary 


TCR[WRC] resets to 00. 

This field can be set by software, but 
cannot be cleared by software, except by a 
software-induced reset. 
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FIT Period 
00 29 clocks 
01 213 clocks 
10 217 clocks 
11 2°! clocks 


FIT Interrupt Enable 


0 Disable FIT interrupt. 
1 Enable FIT interrupt. 


Auto Reload Enable Disables on reset. 
0 Disable auto reload. 
1 Enable auto reload. 


Reserved 
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Chapter 12. Debugging 


The debug facilities of the PPC405GP include support for debug modes for debugging during 
hardware and software development, and debug events that allow developers to control the debug 
process. Debug registers control the debug modes and debug events. The debug registers are 
accessed through software running on the processor or through a JTAG debug port. The debug 
interface is the JTAG debug port. The JTAG debug port can also be used for board test. 


The debug modes, events, controls, and interface provide a powerful combination of debug facilities 
for a wide range of hardware and software development tools. 


12.1 Development Tool Support 


The RISCWatch product from IBM is an example of a development tool that uses the external debug 
mode, debug events, and the JTAG debug port to implement a hardware and software development 
tool. The RISCTrace™ feature of RISCWatch is an example of a development tool that uses the real- 
time instruction trace capability of the PPC405GP. 


12.2 Debug Interfaces 


The PPC405GP provides JTAG and trace interfaces to support hardware and software test and 
debug. Typically, the JTAG interface connects to a debug port external to the PPC405GP; the debug 
port is typically connected to a JTAG connector on a processor board. 


The trace interface connects to a trace port, also external to the PPC405GP, that is typically 
connected to a trace connector on the processor board. 


12.3 IEEE 1149.1 Test Access Port (JTAG Debug Port) 


The IEEE 1149.1 Test Access Port (TAP), commonly called the JTAG (Joint Test Action Group) debug 
port, is an architectural standard described in IEEE Std 1149.1-1990, /EEE Standard Test Access 
Port and Boundary Scan Architecture. The standard describes a method for accessing internal chip 
facilities using a four- or five-signal interface. 


The JTAG debug port, originally designed to support scan-based board testing, is enhanced to 
support the attachment of debug tools. The enhancements, which comply with the IEEE 1149.1 
specifications for vendor-specific extensions, are compatible with standard JTAG hardware for 
boundary-scan system testing. 


JTAG Signals The JTAG debug port implements the four required JTAG signals: TCK, 
TMS, TDI, and TDO, and the optional TRST signal. 

JTAG Clock The frequency of the TCK signal can range from DC to one-half of the 

Requirements internal chip clock frequency. 

JTAG Reset The JTAG debug port logic is reset at the same time as a system reset. 

Requirements Upon receiving TRST, the JTAG debug port returns to the Test-Logic 


Reset state. 
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12.4 JTAG Connector 


A 16-pin male 2x8 header connector is suggested as the JTAG debug port connector. This connector 
definition matches the requirements of the RISCWatch debugger from IBM. The connector is shown 

in Figure 12-1 and the signals are shown in Table 12-1. The connector should be placed as close as 

possible to the chip to ensure signal integrity. 


Note that position 14 does not contain a pin. 


1 


Figure 12-1. JTAG Connector Physical Layout (Top View) 


Table 12-1. JTAG Connector Signals 
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1. A 10K ohm pullup resistor should be connected to this signal to reduce chip power consumption. 
The pullup resistor is not required. 


2. The +POWER signal, sourced from the target development board, indicates whether the I/O 
voltage at which the processor is operating. This signal does not supply power to the RISCWatch 
hardware or to the processor. The active level on this signal can be +5V or +3.3V (note that the 
PPC405GP can have either +5V or +3.3V I/O, but the processor itself must be powered by +3.3V). 
A series resistor (1K ohm or less) should be used to provide short circuit current-limiting protection. 


3. A 10K ohm pullup resistor must be connected to these signals to ensure proper chip operation 
when these inputs are not used. 


12.4.1 JTAG Instructions 


The JTAG debug port provides the standard extest, idcode, sample/preload, and bypass instructions 
and the optional highz and clamp instructions. Invalid instructions behave as the bypass instruction. 


Table 12-2. JTAG Instructions 


[esraion [code [comments 
IEEE 1149.1 standard. 
Sample/Preload | 1111010 | IEEE 1149.1 standard. 
IDCode 1111011 | JEEE 1149.1 standard. 
HighZ 1111101 | IEEE 1149.1a-1993 optional 
1111110 | IEEE 1149.1a-1993 optional 
1111111 | IEEE 1149.1 standard. 


12.4.2 JTAG Boundary Scan 


Boundary Scan Description Language (BSDL), IEEE 1149.1b-1994, is a supplement to IEEE 
1149.1-1990 and IEEE 1149.1a-1993 Standard Test Access Port and Boundary-Scan Architecture. 
BSDL, a subset of the IEEE 1076-1993 Standard VHSIC Hardware Description Language (VHDL), 
allows a rigorous description of testability features in components which comply with the standard. 
BSDL is used by automated test pattern generation tools for package interconnect tests and by 
electronic design automation (EDA) tools for synthesized test logic and verification. BSDL supports 
robust extensions that can be used for internal test generation and to write software for hardware 
debug and diagnostics. 


The primary components of BSDL include the logical port description, the physical pin map, the 
instruction set, and the boundary register description. 


The logical port description assigns symbolic names to the pins of a chip. Each pin has a logical type 
of in, out, inout, buffer, or linkage that defines the logical direction of signal flow. 


The physical pin map correlates the logical ports of the chip to the physical pins of a specific package. 
A BSDL description can have several physical pin maps; each map is given a unique name. 
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Instruction set statements describe the bit patterns that must be shifted into the Instruction Register to 
place the chip in the various test modes defined by the standard. Instruction set statements also 
support descriptions of instructions that are unique to the chip. 


The boundary register description lists each cell or shift stage of the Boundary Register. Each cell has 
a unique number: the cell numbered 0 is the closest to the Test Data Out (TDO) pin; the cell with the 
highest number is closest to the Test Data In (TDI) pin. Each cell contains additional information, 
including: cell type, logical port associated with the cell, logical function of the cell, safe value, control 
cell number, disable value, and result value. 


12.4.3 JTAG Implementation 


PPC405GP JTAG interface I/Os (TDI, TDO, TMs, TCK, and TRST) are 5V tolerant and do not contain 
internal pull up resistors. — 


The optional JTAG instructions, idcode and highz, offer additional JTAG functionality. The idcode 
instruction returns the PPC405GP JTAG ID, which is unique for each chip version. The highz 
instruction disables all chip outputs regardless of whether they are included in the JTAG boundary 
scan chain. 


The PPC405GP provides boundary scan structures on most I/O signals. However, the following 
signals are excluded because of speed and functional considerations: 


¢ Drvrinh1 
¢ Drvrinh2 
¢ PciClk 
¢ Revrinh 
¢ TestEn 


12.4.4 JTAG ID Register (CPCO_JTAGID) 


CPCO_JTAGID is a Device Control Register that enables manufacturing, part number, and version 
information to be determined through the TAP. The mfder instruction is used to read this register. 


Refer to PowerPC 405GP Embedded Processor Data Sheet for the values of the CPCO_JTAGID 
fields. 


MANF LOC 


i fee a7ee 


PART VERS 


Figure 12-2. JTAG ID Register (CPCO_JTAGID) 
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12.5 Trace Port 


The PPC405GP implements a trace status interface to support the tracing of code running in real- 
time. This interface enables the connection of an external trace too!, such as RISCWatch, and allows 
for user-extended trace functions. A software tool with trace capability, such as RISCWatch with 
RISCTrace, can use the data collected from this port to trace code running on the processor. The 
result is a trace of the code executed, including code executed out of the instruction cache if it was 
enabled. Information on trace capabilities, how trace works, and how to connect the external trace 
tool is available in RiSCWatch Debugger User’s Guide. 


A 20-pin male 2x10 header connector is recommended for connecting to the trace status port of the 
PPC405GP. The connector, shown in Figure 12-3, and the signal descriptions in Table 12-3 match 
the requirements of RISCTrace, when used with the RISCWatch processor probe with RISCTrace 


option. 
Index 
Key Notch = 


0.1" 


20 


HRRMRWAARKReD 
9 


Figure 12-3. RISCTrace Header (Top View) 


Table 12-3 describes the assignment of the RISCTrace signals and the processor core outputs to the 
header pins: 


Table 12-3. RISCTrace Header Pin Description 
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Table 12-3. RIiSCTrace Header Pin Description (continued) 


12.6 Debug Modes 


The PPC405GP supports the following debug modes, each of which supports a type of debug tool or 
debug task commonly used in embedded systems development: 


e Internal debug mode, which supports ROM monitors 
e External debug mode, which supports JTAG debuggers 


* Debug wait mode, which supports processor stopping or stepping for JTAG debuggers while 
servicing interrupts 


¢ Real-time trace mode, which supports trigger events for real-time tracing 


Internal and external debug modes can be enabled simultaneously. Both modes are controlled by 
fields in Debug Control Register 0 (DBCRO). Real-time trace mode is available only if internal, 
external, and debug wait modes are disabled. 


12.6.1 Internal Debug Mode 


Internal debug mode provides access to architected processor resources and supports setting 
hardware and software breakpoints and monitoring processor status. In this mode, debug events 
generate debug interrupts, which can interrupt normal program flow so that monitor software can 
collect processor status and alter processor resources. 


Internal debug mode relies on exception handling software at a dedicated interrupt vector and an 
external communications path to debug software problems. This mode, used while the processor 
executes instructions, enables debugging of operating system or application programs. 


In this mode, debugger software is accessed through a communications port, such as a serial port, 
external to the processor core. 


To enable internal debug mode, the Debug Control Register 0 (DBCRO) field IDM is set to 1 
(DBCRO[IDM] = 1). To enable debug interrupts, MSR[DE] = 1. A debug interrupt occurs on a debug 
event only if DBCRO[IDM] = 1 and MSR[DE] = 1. 


12.6.2 External Debug Mode 


External debug mode provides access to architected processor resources and supports stopping, 
starting, and stepping the processor, setting hardware and software breakpoints, and monitoring 
processor status. In this mode, debug events cause the processor to become architecturally frozen. 
While the processor is frozen, normal instruction execution stops and architected processor 
resources can be accessed and altered. External bus activity continues in external debug mode. 


The JTAG mechanism can pass instructions to the processor for execution, allowing a JTAG debugger 
to display and alter processor resources, including memory. 


The JTAG mechanism prevents the occurrence of a privileged exception when a privileged instruction 
is executed while the processor is in user mode. 
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Storage access contro! by a memory management unit (MMU) remains in effect while in external 
debug mode; the debugger may need to modify MSR or TLB values to access protected memory. 


Because external debug mode relies only on internal processor resources, it can be used to debug 
system hardware and software. 


In this mode, access to the processor is through the JTAG debug port. 


To enable external debug mode, DBCRO[EDM] = 1. To enable debug interrupts, MSR[DE] = 1. A 
debug interrupt occurs on a debug event only if DBCRO[EDM] = 1 and MSR[DE] = 1. 


12.6.3 Debug Wait Mode 


In debug wait mode, debug events cause the PPC405GP to enter a state in which interrupts can be 
serviced while the processor appears to be stopped. 


Debug wait mode provides access to architected processor resources in a manner similar to external 
debug mode, except that debug wait mode allows the servicing of interrupt handlers. It supports 
stopping, starting, and stepping the processor, setting hardware and software breakpoints, and 
monitoring processor status. In this mode, if a debug event caused the processor to become 
architecturally frozen, an interrupt causes the processor to run an interrupt handler and return to the 
architecturally frozen state upon returning from the interrupt handler. While the processor is frozen, 
normal instruction execution stops and architected processor resources can be accessed and altered. 
External bus activity continues in debug wait mode. 


The processor enters debug wait mode when internal and external debug modes are disabled 
(DBCRO[IDM, EDM] = 0), debug wait mode is enabled (MSR[DWE] = 1), debug wait is enabled by the 
JTAG debugger, and a debug event occurs. 


For example, while the PPC405GP is in debug wait mode, an external device might generate an 
interrupt that requires immediate service. The PPC405GP can service the interrupt (vector to an 
interrupt handler and execute the interrupt handler code) and return to the previous stopped state. 


Debug wait mode relies only on internal processor resources, so it can be used to debug both system 
hardware and software problems. This mode can also be used for software development on systems 
without a control program, or to debug contro! program problems. 


In this mode, access to the processor is through the JTAG debug port. 


12.6.4 Real-time Trace Debug Mode 


Real-time trace debug mode supports the generation of trigger events for tracing the instruction 
stream being executed out of the instruction cache in real-time. In this mode, debug events can be 
used to contro! the collection of trace information through the use of trigger event generation. The 
broadcast of trace information is independent of the use of debug events as trigger events. This mode 
does not alter the processor performance. 


A trace event occurs when internal and external debug modes are disabled (DBCRO[IDM, EDM] = 0) 
and a debug events occurs. 


Whena trace event occurs, a trace device can capture trace signals that provide the instruction trace 
information. Most trace events generated from debug events are blocked when internal debug, 
external debug, or debug wait modes are enabled 
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12.7 Processor Control 


The PPC405GP provides the following debug functions for processor control. Not all facilities are 
-available in all debug modes. 


Instruction Step The processor is stepped one instruction at a time, while stopped, using the 
JTAG debug port. 


Instruction Stuff While the processor is stopped, instructions can be stuffed into the processor 
and executed using the JTAG debug port. 


Halt The processor can be stopped by activating an external halt signal on an 
external event, such as a logic analyzer trigger. This signal freezes the 
processor architecturally. While frozen, normal instruction execution stops and 
architected processor resources can be accessed and altered using the JTAG 
debug port. Normal execution resumes when the halt signal is deactivated. 


Stop The processor can be stopped using the JTAG debug port. Activating a stop 
causes the processor to become architecturally frozen. While frozen, normal 
instruction execution stops and the architected processor resources can be 
accessed and altered using the JTAG debug port. 


Reset An external reset signal, the JTAG debug port, or DBCRO can request core, 
chip, and system resets. 
Debug Events A debug event triggers a debug operation. The operation depends on the — 


debug mode. For more information and a list of debug events, see “Debug 
Events” on page 12-16. 


Freeze Timers The JTAG debug port or DBCRO can control timer resources. The timers can 
be enabled to run, freeze always, or freeze on a debug event. 


Trap Instructions —_ The trap instructions tw and twi can be used, with debug events, to implement 
software breakpoints. 


12.8 Processor Status 


The processor execution status, exception status, and most recent reset can be monitored. 
Execution Status The JTAG debug port can monitor processor execution status to determine 
whether the processor is stopped, waiting, or running. 


Exception Status The JTAG debug port can monitor the status of pending synchronous 
exceptions. — 


Most Recent Reset The JTAG debug port or an mfspr instruction can be used to read the Debug 
Status Register (DBSR) to determine the type of the most recent reset. 


12.9 Debug Registers 


Several debug registers, available to debug tools running on the processor, are not intended for use 
by application code. Debug tools contro! debug resources such as debug events. Application code 
that uses debug resources can cause the debug tools to fail, as well as other unexpected results, 
such as program hangs and processor resets. 


Application code should not use the debug resources, including the debug registers. 
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12.9.1 Debug Control Registers 


The debug control registers (DBCRO and DBCR1) can enable and configure debug events, reset the 
processor, control timer operation during debug events, enable debug interrupts, and set the 
processor debug mode. 


12.9.1.1 Debug Control Register 0 (DBCRO) 


EDM RST BT TDE IA2 1A12X° IA4 IA34X IA34T 


pO] 1] 2 3} 4] 5] 6] 7] 8] 8) 10) 41) 12) 13) 14) 15) 16] 17) 418 sk ee eae er 8O/8T] 


IDM IC EDE IAi IA12) IA3_ 1A34_ IA12T FT 


Figure 12-4. Debug Contro! Register 0 (DBCRO) 


External Debug Mode 
0 Disabled 
1 Enabled 


Internal Debug Mode 
0 Disabled 
1 Enabled 


Reset Causes a processor reset request when 
00 No action set by software. 

01 Core reset 

10 Chip reset 

11 System reset 


Attention: Writing 01, 10, or 11 to this field causes a processor reset request. 


Instruction Completion Debug Event 
0 Disabled 
1 Enabled 


Branch Taken Debug Event 
0 Disabled 
1 Enabled 


Exception Debug Event 
0 Disabled 
1 Enabled 


Trap Debug Event 
0 Disabled 
1 Enabled 


IAC 1 Debug Event 
O Disabled 
1 Enabled 


IAC 2 Debug Event 
0 Disabled 
1 Enabled 
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\A12 


1A12X 


IA3 


instruction Address Range Compare 1-2 
0 Disabled 
1 Enabled 


Enable Instruction Address Exclusive 
Range Compare 1-2 

0 Inclusive 

1 Exclusive 


IAC 3 Debug Event 
0 Disabled 
1 Enabled 


IAC 4 Debug Event 
0 Disabled 
1 Enabled 


Instruction Address Range Compare 3-4 
0 Disabled 
1 Enabled 


Instruction Address Exclusive Range 
Compare 3-4 

0 Inclusive 

1 Exclusive 


Instruction Address Range Compare 1-2 
Toggle 

0 Disabled 

1 Enable 


Instruction Address Range Compare 3-4 
Toggle 

0 Disabled 

1 Enable 


Registers [AC1 and IAC2 define an 
address range used for IAC address 
comparisons. 


Selects the range defined by IAC1 and 
|AC2 to be inclusive or exclusive. 


Registers IAC3 and IAC4 define an 
address range used for IAC address 
comparisons. 


Selects range defined by IAC3 and IAC4 to 
be inclusive or exclusive. 


Toggles range 12 inclusive, exclusive 
DBCR{[IA12X] on debug event. 


Toggles range 34 inclusive, exclusive 
DBCR[IA34X] on debug event. 


Reserved 


Freeze timers on debug event 
0 Timers not frozen 
1 Timers frozen 


PPC405GP User’s Manual 


Preliminary 


12.9.1.2 Debug Control Register1 (DBCR1) 
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Figure 12-5. Debug Control Register 1 (DBCR1) 


DAC1 Read Debug Event 
0 Disabled 
1 Enabled 


DAC 2 Read Debug Event 
0 Disabled 
1 Enabled 


DAC 1 Write Debug Event 
0 Disabled 
1 Enabled 


DAC 2 Write Debug Event 
0 Disabled 
1 Enabled 


DAC 1 Size 

00 Compare all bits 

01 Ignore Isb (least significant bit) 
10 Ignore two Isbs 

11 Ignore five Isbs 


DAC 2 Size 

00 Compare all bits 

01 Ignore Isb (least significant bit) 
10 Ignore two Isbs 

11 Ignore five Isbs 


Enable Data Address Range Compare 1:2 
0 Disabled 

1 Enabled 

Data Address Exclusive Range Compare 
1:2 

0 Inclusive 

1 Exclusive 


Reserved 
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Address bits used in the compare: 


Byte address . 

Halfword address 

Word address 

Cache line (8-word) address 


Address bits used in the compare: 


Byte address 

Halfword address 

Word address 

Cache line (8-word) address 


Registers DAC1 and DAC2 define an 
address range used for DAC address 
comparisons 


Selects range defined by DAC1 and DAC2 


to be inclusive or exclusive 
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Data Value Compare 1 Mode 
00 Undefined 

01 AND All bytes selected by DBCR1[DV1BE] must 
compare to the appropriate bytes of DVC1. 


Type of data comparison used: 


10 OR . | One of the bytes selected by 
DBCR1[DV1BE] must compare to the 
appropriate bytes of DVC1. 


11 AND-OR The upper halfword or lower halfword must 
compare to the appropriate halfword in 
DVC1. When performing halfword 
compares set DBCR1[DV1BE] = 0011, 
1100, or 1111. 


12:13 | DV1M 


Data Value Compare 2 Mode 
00 Undefined 

01 AND All bytes selected by DBCR1[DV2BE] must 
compare to the appropriate bytes of DVC2. 


Type of data comparison used 


10 OR One of the bytes selected by 
DBCR1[DV2BE] must compare to the 
appropriate bytes of DVC2. 


11 AND-OR The upper halfword or lower halfword must 
compare to the appropriate halfword in 
DVC2. When performing halfword 
compares set DBCR1[DV2BE] = 0011, 
1100, or 1111. 


Data Value Compare 1 Byte Selects which data bytes to use in data 


14:15 | DV2M 
0 Disabled value comparison 


16:19 | DV1IBE 
1 Enabled 

20:23 | DV2BE | Data Value Compare 2 Byte Selects which data bytes to use in data 
0 Disabled value comparison 
1 Enabled 


a Geom 


12.9.2 Debug Status Register (DBSR) 


The DBSR contains status on debug events and the most recent reset; the status is obtained by 
reading the DBSR. The status bits are normally set by debug events or by any of the three reset 
types. 


Clearing DBSR fields is performed by writing a word to the DBSR, using the mtdbsr extended 
mnemonic, having a 1 in all bit positions to be cleared and a 0 in the all other bit positions. The data 
written to the DBSR is not direct data, but a mask. A 1 clears the bit and a 0 has no effect. 


Application code should not use the DBSR. 
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Figure 12-6. Debug Status Register (DBSR) 


Instruction Completion Debug Event 
0 Event did not occur 
1 Event occurred 


Branch Taken Debug Event 
0 Event did not occur 
1 Event occurred 


Exception Debug Event 
O Event did not occur 
1 Event occurred 


Trap Instruction Debug Event 
O Event did not occur 
1 Event occurred 


Unconditional Debug Event 
O Event did not occur 
1 Event occurred 


IAC1 Debug Event 
O Event did not occur 


1 Event occurred 


IAC2 Debug Event 
O Event did not occur 
1 Event occurred 


DAC1 Read Debug Event 
O Event did not occur 
1 Event occurred 


DAC1 Write Debug Event 
O Event did not occur 
1 Event occurred 


DAC2 Read Debug Event 
0 Event did not occur 
1 Event occurred 


DAC2 Write Debug Event 
0 Event did not occur 
1 Event occurred 
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Imprecise Debug Event 

0 No circumstance that would cause a 
debug event (if MSR[DE] = 1) occurred 

1 A debug event would have occurred, but 
debug exceptions were disabled 
(MSR[DE] = 1) 


| [AC3 Debug Event 
0 Event did not occur 
1 Event occurred 


IAC4 Debug Event 


0 Event did not occur 
1 Event occurred 


Reserved 


Most Recent Reset This field is set to a value, indicating the 

00 No reset has occurred since last type of reset, when a reset occurs. 
cleared by software. 

01 Core reset 

10 Chip reset 

11 System reset 


Reserved 


12.9.3 Instruction Address Compare Registers (IAC1-IAC4) 


The PPC405GP can take a debug event upon an attempt to execute an instruction from an address. 
The address, which must be word-aligned, is defined in an IAC register. The DBCRO[IA1, IA2] fields of 
DBCRO controls the instruction address compare (IAC) debug event. 


0 | 29[30 31] 


Figure 12-7. Instruction Address Compare Registers (IAC1-IAC4) 
0:29 Instruction Address Compare word Omit two low-order bits of complete 
address address. 


[soar [Rae 


12.9.4 Data Address Compare Registers (DAC1—DAC2) 


The PPC405GP can take a debug event upon storage or cache references to addresses specified in 
the DAC registers. The specified addresses in the DAC registers are EAs of operands of storage 
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references or cache instructions. The fields DBCR1[D1R], [D2R] and DBCR[D1W], [D2W] control the 
DAC-read and DAC-write debug events, respectively. 


Addresses in the DAC registers specify exact byte EAs for DAC debug events. However, one may 
want to take a debug event on any byte within a halfword (ignore the least significant bit (LSb) of the 
DAC), on any byte within a word (ignore the two LSbs of DAC), or on any byte within eight words 
(ignore four LSbs of DAC). DBCR1[D1S, D2S] control the addressing options. 


Errors related to execution of storage reference or cache instructions prevent DAC debug events. 


Figure 12-8. Data Address Compare Registers (DAC1—DAC2) 


0:31 Data Address Compare (DAC) byte DBCRO[D1S] determines which address 
address bits are examined. 


12.9.5 Data Value Compare Registers (DVC1—DVC2) 


The PPC405GP can take a debug event upon storage or cache references to addresses specified in 
the DAC registers, that also require the data at that address to match the value specified in the DVC 
registers. The data address compare for a DVC events works the same as for a DAC event. Cache 
operations do not cause DVC events. If the data at the address specified matches the value in the 
corresponding DVC register a DVC event will occur. The fields DBCR1[DV1M, DV2M] control how the 
data value are compared. 


Errors related to execution of storage reference or cache instructions prevent DVC debug events. 


E 
—_ 


Figure 12-9. Data Value Compare Registers (DVC1—DVC2) 


0:31 | | Data Value to Compare 
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12.9.6 Debug Events 


Debug events, enabled and configured by DBCRO and DBCR1 and recorded in the DBSR, cause 
debug operations. A debug event occurs when an event listed in Table 12-4, “Debug Events,” on 
page 12-16 is detected. The debug operation is performed after the debug event. 


In internal debug mode, the processor generates a debug interrupt when a debug event occurs. In 
external debug mode, the processor stops when a debug event occurs. When internal and external 
debug mode are both enabled, the processor stops on a debug event with the debug interrupt 
pending. When external and internal debug mode are both disabled, and debug wait mode is enabled 
the processor stops, but can be restarted by an interrupt. When all debug modes are disabled, debug 
events are recorded in the DBSR, but no action is taken. 


Table 12-4 lists the debug events and the related fields in DBCRO, DBCR1, and DBSR. DBCRO and 
DBCR1 enable the debugs events, and the DBSR fields report their occurrence. 


Table 12-4. Debug Events 


Enabling 
DBCRO, DBCR1 Reporting 
Fields DBSR Fields Description 


Instruction Completion —— ee FIC =| Occurs after | Occurs after completion of an instruction. _ | of an instruction. 
Branch Taken ee before execution of a branch 
instruction determined to be taken. 


Exception Taken es earl Occurs after an exception. 

Trap Instruction Occurs before execution of a trap 
instruction where the conditions are such 
that the trap will occur. 

Unconditional Occurs immediately upon being set by the 
JTAG debug port. 


Instruction Address 1A1, lA2, IA3, IA1, 1A2, 1A3, Occurs before execution of an instruction 
Compare 1A4, IA12, |A4 at an address that matches an address 
IA12X, IA12T, defined by the Instruction Address 
1A34, |A34X, Compare Registers (IAC1—IAC4). 
IA34T 


Data Address D1R, DiW, DiS, | DR2,DW2 Occurs before execution of an instruction 
Compare D2R, D2W, D2s, that accesses a data address that matches 
DA12, DA12X the contents of the specified DAC register. 


Data Value Compare DV1M, DV2M, ; Occurs after execution of an instruction 
DV1BE, DV2BE that accesses a data address for which a 
DAC occurs, and for which the value at the 
address matches the value in the specified 
DVC register. 


Imprecise Indicates that another debug event 
occurred while MSR[DE] = 0 


12.9.7 Instruction Complete Debug Event 


This debug event occurs after the completion of an instruction. If DBCRO[IDM] = 1, DBCRO[EDM] = 
and MSR[DE] =0 this debug event is disabled. 
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12.9.8 Branch Taken Debug Event 


This debug event occurs before execution of a branch instruction determined to be taken. If 
DBCRO[IDM] = 1, DBCRO[EDM] = 0 and MSR[DE] =0 this debug event is disabled. 


12.9.9 Exception Taken Debug Event 


This debug event occurs after an exception. Exception debug events always include the non-critical 
class of exceptions. When DBCRO[IDM] = 1 and DBCRO[EDM] = 0 the critical exceptions are not 
included. 


12.9.10 Trap Taken Debug Event 


This debug event occurs before execution of a trap instruction where the conditions are such that the 
trap will occur. When trap is enabled for a debug event, external debug mode is enabled, internal 
debug mode is enabled with MSR[DE] enabled, or debug wait mode is enabled, a trap instruction will 
not cause a program exception. 


12.9.11 Unconditional Debug Event 
This debug event occurs immediately upon being set by the JTAG debug port. 


12.9.12 IAC Debug Event 


This debug event occurs before execution of an instruction at an address that matches an address 
defined by the Instruction Address Compare Registers (IAC1-IAC4). DBCRO[IA1, !A2, IA3, IA4] 
enable IAC debug events IAC can be defined as an exact address comparison to one of the |ACn 
registers or on a range of addresses to compare defined by a pair of |ACn registers. 


12.9.12.1 IAC Exact Address Compare 


In this mode each IACn register specifies an exact address to compare. These are enabled by setting 
DBCRO[IAn] = 1 and disabling IAC range compare (DBCRO[IA12X] = 0 for IAC1 and IAC2 and 
DBCRO[IA23X] = 0 for IAC3 and IAC4). The corresponding DBSR{IAn] bit displays the results of the 
debug event. 


12.9.12.2 IAC Range Address Compare 
In this mode a pair of [ACn registers are used to define a range of addresses to compare: 


Range 1:2 corresponds to IAC1 and IAC2 
Range 3:4 corresponds to IAC3 and IAC4 


To enable Range 1:2, DBCRO[IA12] = 1 and DBCRO[IA1] or DBCRO[IA2] =1. An IAC event wiil be 
seen on the DBSRIIAn] field that corresponds to the enabled DBCRO[IAn] field. If DBCRO[IA1] and 
DBCRO[IA2] are enabled, the results of the event are reported on both DBSR fields. Setting 
DBCRO[!IA12] =1 prohibits IAC1 and IAC2 from being used for exact address compares. 


To enable Range 3:4, DBCRO[IA34] = 1 and DBCRO[IA3] or DBCRO[IA4] =1. An IAC event will be 
seen on the DBSR[IAn] field that corresponds to the enabled DBCRO[IAn] field. If DBCRO[IA3] and 
DBCRO[IA4] are enabled, the results of the event will be reported on both DBSR fields. Setting 
DBCRO[IA34] =1 prohibits IAC3 and IAC4 from being used for exact address compares. 
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Ranges can be defined as inclusive, as shown in the preceding examples, or exclusive, using 
DBCRO[IA12X] (corresponding to range 1:2) and DBCRO[IA34X] (corresponding to range 3:4), as 
follows: , 


DBCRO[IA12] = 1: Range 1:2 = 1AC1 < range < IAC2. 
DBCRO[IA12X] = 1: Range 1:2 = Range low < IAC1 or IAC2 < Range high 
DBCRO[IA34] = 1: Range 3:4 = IAC3 < range < IAC4. 
DBCRO[IA34X] = 1: Range 3:4 = Range low < IAC3 or IAC4 < Range high 


Figure 12-10 shows the range selected in an inclusive IAC range address compare. Note that the 
address in IAC1 is considered part of the range, but the address in IAC2 is not, as shown in the 
preceding examples. The thick lines indicate that the indicated address is included in the compare 
results. 


FFFF FFFF 


1AC1 IAC2 


Figure 12-10. Inclusive IAC Range Address Compares 


Figure 12-11 shows the range selected in an inclusive IAC range address compare. Note that the 
address in IAC1 is not considered part of the range, but the address in IAC2 is, along with the highest 
memory address, as shown in the preceding examples. 


FFFF FFFF 


IAC1 1AC2 


Figure 12-11. Exclusive IAC Range Address Compares 


To toggle the range from inclusive to exclusive or from exclusive to inclusive on a IAC range debug 
event, DBCRO[IA12T] (corresponding to range 1:2) and DBCRO[IA34T] (corresponding to range 3:4) 
are used. If these fields are set, the DBCRO{IA12X] or DBCRO[IA34X] fields toggle on an IAC debug 
event, changing the defined range. 


When a toggle is enabled (DBCRO[IA12T] for range 1:2 or DBCRO[IA34T] = 1 for range 3:4), and 
DBCRO[IDM] =1, DBCRO[EDN] = 0, and MSR[DE] = 0, IAC range comparisons for the corresponding 
toggle field are disabled. 


12.9.13 DAC Debug Event 


This debug event occurs before execution of an instruction that accesses a data address that 
matches the contents of the specified DAC register. DBCR1[D1R, D2R, D1W, D2W] enable DAC 
debug events for address comparisons on DAC1 and DAC2 for read instructions, DAC2 for read. 
instructions, DAC1 for write instructions, DAC2 for write instructions respectively. Loads are reads and 
stores are writes. DAC can be defined(DBCR1[D1R, D2R})as an exact address comparison to one of | 
the DACn registers or a range of addresses to compare defined by DAC1 and DAC2 registers. 
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12.9.13.1 DAC Exact Address Compare 


In this mode, each DACn register specifies an exact address to compare. Thes registers are enabled 
by setting one or more of DBCR1[D1R,D2R,D1W,D2W] = 1, and disabling DAC range compare 
DBCR1[(DA12xX] = 0. The corresponding DBSR[DR1,DR2,DW1,DW2] field displays the results of a 
DAC debug event. 


The address for a DAC is the effective address (EA) of a storage reference instruction. EAs are 
always generated within a single aligned word of memory. Unaligned load and store, strings, and 
multiples generate multiple EAs to be used in DAC comparisons. 


Data address compare (DAC) debug events can be set to react to any byte in a larger block of 
memory, in addition to reacting to a byte address match. The DAC Compare Size fields (DBCR1[D1S, 
D2S]) allow DAC debug events to react to byte, halfword, word, or 8-word line address by ignoring a 
number of LSBs in the EA. 


DAC 1 Size 
00 Compare all bits Byte address 
01 Ignore LSB (least significant bit) Halfword address 


10 Ignore two LSBs Word address 
11 Ignore five LSBs Cache line (8-word) address 


The user must determine how the addresses of interest are accessed, relative to byte, halfword, 
word, string, and unaligned storage instructions, and adjust the DAC compare size field appropriately 
to cover the addresses of interest. 


For example, suppose that a DAC debug event should react to byte 3 of a word-aligned target. A DAC 
set for exact compare would not recognize a reference to that byte by load/store word or load/store 
halfword instructions, because the byte address is not the EA of such instructions. In such a case, the 
D1S field must be set for a wider capture range (for example, to ignore the two least significant bits 
(LSBs) if word operations to the misaligned byte are to be detected). The wider capture range may 
result in excess debug events (events that are within the specified capture range, but reflect byte 
operations in addition to the desired byte). Such excess debug events must be handled by software. 


While load/store string instructions are inherently byte addressed the processor will generate EAs 
containing the largest portion of an aligned word address as possible. It may not be possible to DAC 
on a specific individual byte using load/store string instructions. 


12.9.13.2 DAC Range Address Compare 


In this mode, the pair of DAC1 and DAC2 registers are used to define a range of addresses to 
compare. 


To enable DAC range, DBCR1[DA12] = 1 and one or more of DBCR1[D1R,D2R,D1W,D2W] =1. The 
DAC event is seen on the DBSR[DR1,DR2,DW1,DW2] field that corresponds to the 
DBCR1[D1R,D2R,D1W,D2W] field that is enabled. For example, if DBCR1[D1R] and DBCR1[D2R] 
are enabled, the results of a DAC debug event are reported on DBSR[DR1, DR2]. Setting 
DBCR1[DA12] =1 prohibits DAC1 and DAC2 from being used for exact address compares. 


Ranges are defined to be inclusive or exclusive, using the DBCR1[DA12X], as follows: 


DBCR1[DA12] = 1: Range = DAC1 < range < DAC2. 
DBCR1(DA12X] = 1: Range = Range low < DAC1 or DAC2 Range high. 
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Figure 12-12 shows the range selected in an inclusive DAC range address compare. Note that the 
address in DAC1 is considered part of the range, but the address in DAC2 is not, as shown in the 
preceding examples. The thick lines indicate that the indicated address is included in the compare 
results. 


0 FFFF FFFF 


DAC1 DAC2 


Figure 12-12. Inclusive DAC Range Address Compares 


Figure 12-13 shows the range selected in an exclusive DAC range address compare. Note that the 
address in DAC1 is not considered part of the range, but the address in DAC2 is, along with the 
highest memory address, as shown in the preceding examples. 


0 FFFF FFF 


DAC1 DAC2 


Figure 12-13. Exclusive DAC Range Address Compares 
The DAC Compare Size fields (DBCR1[DiS, D2S]) are not used by DAC range comparisons. 


12.9.13.3 Data Address Compare (DAC) Applied to Cache Instructions 
Some cache instructions may cause DAC debug events. There are several special cases. 
Table 12-5 summarizes possible DAC debug events by cache instruction: 
‘Table 12-5. DAC Applied to Cache Instructions 
Possible DAC Debug Event 
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Table 12-5. DAC Applied to Cache Instructions (continued) 


Possible DAC Debug Event 
NO na ta ee el 
eee eee 2 eee 
Architecturally, the dcbi and dcbz instructions are “stores.” These instructions can change data, or 
cause the loss of data by invalidating a dirty line. Therefore, they can cause DAC-write debug events. 


The dccci instruction can also be considered a “store” because it can change data by invalidating a 
dirty line. However, decci is not address-specific; it affects an entire congruence class regardless of 
the operand address of the instruction. Because it is not address-specific, decci does not cause 
DAC-write debug events. 


Architecturally, the debt, dcbtst, dcbf, and dcbst instructions are “loads.” These instructions do not 
change data. Flushing or storing a cache line from the cache is not architecturally a “store” because a 
store had already updated the cache; the debf or debst instruction only updates the copy in main 
memory. 


The debt and debtst instructions can cause DAC-read debug events regardless of cachability. 


Although debf and debst are architecturally “loads,” these instructions can create DAC-write (but not 
DAC-read) debug events. In a debug environment, the fact that external memory is being written is 
the event of interest. 


Even though dcread and dccci are not address-specific (they affect a congruence class regardless of 
the instruction operand address), and are considered “loads,” in the PPC405GP they do not cause 
DAC debug events. 


All ICU operations (icbi, icbt, iccci, and icread) are architecturally treated as “loads.” icbi and icbt 
cause DAC debug events. iccci and icread do not cause DAC debug events in the PPC405GP. 


12.9.13.4 DAC Applied to String Instructions 


An stswx instruction with a string length of 0 is a no-op. The !swx instruction with the string length 
equal to 0 does not alter the RT operand with undefined data, as allowed by the PowerPC 
Architecture. Neither stswx nor Iswx with zero length causes a DAC debug event because storage is 
not accessed by these instructions. 


12.9.14 Data Value Compare Debug Event 


A data value compare (DVC) debug event can occur only after execution of a load or store instruction 
to an address that compares with the address in one of the DACn registers and has a data value that 
matches the corresponding DVCn register. Therefore, a DVC debug event requires both the data 
address comparison and the data value comparison to be true. A DVCn debug event when enabled 
in the DBCR1 supercedes a DACn debug event since the DVCn and the DACn both use the same 
DACn register. 


DVC1 debug events are enabled by setting the appropriate DAC enable DBCR1[D1R,D1W] to cause 
an address comparison and by setting anybit combination in the DBCR1[DV1BE]. DVC2 debug 
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events are enabled by setting the appropriate DAC enable DBCR1[D2R,D2W] to cause an address 
comparison and by setting any bit combination in the DBCR1[DV1BE]. Each bit in DBCR1[DV1BE, 
DV2BE] correspondes to a byte in DVC1 and DVC2. Exact address compare and range agcices 
compare work the same for DVC as for a simple DAC. 


DBSR{DR1] and DBSR[DW1] record status for DAC1 debug events. Which DBSR bit is set depends — 
on the setting of DBCR1[D1R] and DBCR[D1W). If DBCR1[D1R] = 1, DBSR[DR1] = 1, assuming that 
a DVC event occurred. Similarly, if DBCR1[D1W] = 1, DESRIOW = 1, assuming that a DVC event 
occurred. 


Similarly, DBSR[DR2] and DBSR[DW2] record status for DAC2 debug events. Which DBSR bit is set 
depends on the setting of DBCR1[D2R] and DBCR[D2W]. If DBCR1[D2R] = 1, DBSR[DR2] = 1, 
assuming that a DVC event occurred. mney if DBCR1[D2W] = 1, DBSR[DW2] = 1, assuming that 
a DVC event occurred. 


In the following example, a DVC1 event is enabled setting the DBCR1[D1R] = 1, DBCR1[D1W] = 1, 
DBCR1[DA12] = 0, and DBCR1[DV1BE ‘ 0000]. When the data address and data \alue match the 
DAC1 and DVC1 ,aDVC1 event is recorded in DBSR[DR1] or DBSR[DW1], depending on whether 
the operation is a load (read) or a store (write). This example corresponds to the last line of . 
Table 12-6. 


In Table 12-6, nis 1 or 2, depending on whether the bits apply to DAC1, DAC2, DVC1, and DVC2 
events. “Hold” indicates that the DBSR holds its value unless cleared by software. “RA” indicates that 
the operation is a read (load) and the data address compares (exact or range). “WA” indicates that the 
operation is a write (store) and the data address compares (exact or range). “RV” indicates that the 
operation is a read (load), the data address compares (exact or range), and the data value compares 
according to the DBCR1[DVCr]. 


Table 12-6. Setting of DBSR Bits for DAC and DVC Events 


DBCR1 DBSR 
DVCn Enabled | DVCn Event 


Te 
a a a A 
ae a a 


The settings of DBCR1[DV1M] and DBCR1[DV2M] are more precisely defined in Table 12-7 (n 
enables the table to apply to DBCR1[DV1M, DV2M] and DBCR1[DV1BE, DV2BE]). DVnBE,, indicates 
bytes selected (or not selected) for comparison in DBCR1[DVnBE]. 


When DBCR1[DVn\] = 01, the comparison is an AND; all bytes must compare to the appropriate 
bytes of DVC1. 
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When DBCR1[DVn\N] = 10, the comparison is an OR; at least one of the selected bytes must 
compare to the appropriate bytes of DVC1. 


When DBCR1[DVn\M] = 11, the comparison is an AND-OR (halfword) comparison. This is intended 
for use when DBCR1[DVnBE] is set to 0011, 0111, or 1111. Other values of DBCR1[DVnBE] can be 
compared, but the results are more easily understood using the AND and OR comparisons. In 
Table 12-7, “not” is =, AND is a, and OR is v. 


Table 12-7. Comparisons Based on DBCR1[DVnM] 


01 AND (=DVnBEg v (DVC1 [byte 0] = data[byte 0])) ~ 
(=DVnBE, v (DVC1[byte 1] = data[byte 1])) ~ 
(=DVnBEd v (DVC1[byte 2] = data[byte 2])) A 
PP 
_ 


(=DVnBE3 v (DVC1[byte 3] = data[byte 3])) 
12.9.15 Imprecise Debug Event 


(DVnBEg a (DVC1 [byte 0] = data[byte 0])) v 
(DVnBE, A (DVC1[byte 1] = data[byte 1])) v 
(DVnBE» a (DVC1[byte 2] = data[byte 2])) v 
(DVnBE3 A (DVC1[byte 3] = data[byte 3]) 


(DVnBEg « (DVC1[byte 0] = data[byte 0)) 
(DVnBE, « (DVC1[byte 1] = data[byte 1}) 
(DVnBE» ~ (DVC1 [byte 2] = data[byte 2)) 
(DVnBE3 A (DVC1[byte 3] = data[byte 1]) 


A 
Vv 
A 


) 
) 
) 
) 
) 
) 


The imprecise debug event is not an independent debug event, but indicates that a debug event 
occurred while MSR[DE] = 0. This is useful in internal debug mode if a debug event occurs while in a 
critical interrupt handler. On return from interrupt, a debug interrupt occurs if MSR[DE] = 1. If 
DBSR{[IDE] = 1, the debug event causing the interrupt occurred sometime earlier, not immediately 
after a debug event. 


' Preliminary Debugging 12-23 


12-24 PPC405GP User's Manual Preliminary 


Chapter 13. Clock and Power Management 


The PPC405GP provides a clock and power management (CPM) controller that reduces power 
dissipation by stopping clocks in unused or dormant functional units. Use of the CPM controller 
requires careful programming and special consideration to avoid compromising system and functional 
unit integrity. 


The CPM controller supports three different types of sleep interfaces to the functional units: 


Ina CPM class 1 interface, the CPM_Sleep_N signal is asserted by the CPM controller when a 
register bit is set by software. The functional unit is unconditionally put to sleep. There is no other 
communication with the functional unit. 


In a CPM class 2 interface, the functional unit uses a combination of its internal state and external 
inputs to determine whether or not it can be put to sleep. If sleeping is permitted, the functional unit 
asserts the Sleep_Req signal to the CPM controller that responds by asserting CPM_Sleep_N if 
the enable for that unit is set. The CPM_Sleep_N signal to a class 2 unit is deasserted when the 
CPM controller enable bit for that unit is reset, or when the unit deasserts its Sleep_Req signal. 


The CPM class 3 interface has a CPM_Sleeplnit signal that is asserted by the CPM controller to 
request that a functional unit go to sleep. If the unit can sleep, it asserts the Sleep_Req signal to 
the CPM controller. The CPM_Sleep_N signal is then asserted by the CPM controller to shut off the 
class 3 clocks in the functional unit. The functional unit or the CPM controller can end the sleep 
state. If the CPM controller enable bit for the unit is reset, the CPM controller immediately 
deasserts CPM_Sleeplnit and CPM_Sleep_N. 


13.1 CPM Registers 


Table 13-1 lists the registers used to program the CPM controller. 


Table 13-1. CPM Registers 


Reset Value (0:16) 
Register Name DCR Address (bits 17:31 reserved) 
CPCO_ER 0x0B9 Read/Write 0x0000xxxx 


CPCO_FR Ox0BA Read/Write Ox0000xxxx 
CPCO_SR 0x0B8 Read Only OxFFFFxXxxx 


Each functional unit has one bit in each of CPCO_ER, CPCO_FR, and CPCO_SR. The bit assignment 
is the same in the three registers. Figure 13-1 shows the bit assignment and CPM class for each 
PPC405GP functional units. 
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Figure 13-1. CPM Registers (CPCO_ER, CPCO_FR, CPCO_SR) 
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13.1.1 CPM Enable Register (CPCO_ER) 


The CPCO_ER bits enable the process of putting a functional unit to sleep. The class of a unit 
determines how its interface signals are controlled when the bit associated with the unit is set to 1. 


Class 1 


Class 2 


Class 3 


When an associated CPCO_ER bit is set to 1, the CPM_Sleep_N signal to the class 
1 unit is asserted. When the bit is set to 0, CPM_Sleep_N is deasserted. There are 
some additional considerations to avoid generating extraneous interrupts when 
waking the UIC. Before enabling sleep mode (setting DPCO_ER[UIC] to 1), save the 
contents of the UIC Masked Status Register (UIC_MSR) and UIC Enable Register 
(UICO_ER), and disable all interrupts by setting UICO_ER to 0. After exiting sleep 
mode, write the ones complement of the saved contents of the UIC_MSR to the UIC 
Status Register (UICO_SR), and restore the state of the UICO_ER. 


When an associated CPCO_ER bit is set to 1, and the Sleep_Req signal from the 
class 2 unit is asserted (the unit is requesting sleep state), CPM_Sleep_N to the 
class 2 unit is asserted. When the bit is set to 0, the CPM_Sleep_N signal is 
deasserted. 


When an associated CPCO_ER bit is set to 1, the CPM_Sleeplnit signal to the class 
3 unit is asserted (the CPM controller is requesting permission to put the unit to 
sleep). When the class 3 unit activating the Sleep_Req in response, (the unit is 
giving permission to be put to sleep), CPM_Sleep_N signal to the class 3 unit is 
asserted. When the bit is set to 0, CPM_SleepInit and CPM_Sleep_N are 
deasserted. 


13.1.2 CPM Force Register (CPCO_FR) 


Setting a CPCO_FR bit forces assertion of the CPM_Sleep_N signal to the functional unit. For a class 
1 unit, this is equivalent to setting the CPCO_ER bit associated with the unit. For class 2 or class 3. 
units, CPM_Sleep_N is asserted regardless of the state of the Sleep_Req signal coming from the 


unit. 


13.1.3 CPM Status Register (CPCO_SR) 
The read-only CPCO_SR shows the current state of all CPM_Sleep_N signals. 
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Chapter 14. Decompression Controller Operation 


The decompression controller enables PPC405GP instructions to be stored in memory ina 
compressed form, thus, reducing memory requirements and overall system cost. Because the 
processor core cannot execute compressed instructions, hardware is provided to decompress the 
compressed instructions. The decompression controller decompresses instructions on-the-fly, as the 
processor core fetches instructions from memory. The decompression unit is located in the path 
between memory and the processor core. 


When decompressed instructions are stored in the instruction cache unit (ICU), the performance 
penalty is minimized. Increased latency occurs only when instruction fetches miss in the cache. 
Average latency is further reduced by a buffer in the decompression hardware that holds more 
instructions than are requested by the CPU. If a subsequent fetch occurs to a nearby memory location 
that is already in the buffer, data is returned from the buffer; no memory cycle is required. In such 
cases, initial latency is less than a normal uncompressed fetch from memory. 


Code to be stored in compressed form is compressed by software after compiling and before loading. 
Thus, code compression can be performed once by the application developer. The compressed code 
is in the load image. 


The decompression controller, located between the processor core and memory, is transparent to the 
processor core. When the processor core performs an instruction fetch, the decompression controller 
works with the memory controller (SDRAM or external bus controller [EBC]) to provide a 
decompressed instruction stream to the CPU. The memory controllers deliver the compressed stream 
of instructions to the decompression controller, which decompresses the instructions and delivers the 
resulting instruction stream to the processor core. 


14.1 Code Compression and Decompression 


While code decompression is performed in hardware when the processor core fetches instructions in 
a compressed code address space, code compression is performed only once, between the compile 
and load steps in the usual programming sequence. 


14.1.1 Code Compression 


Compression software analyzes compiled code, finds the set of most frequently used instructions, 
and builds decode tables from those instructions. 


The compression software splits each instruction, analyzes the upper and lower halfwords of the 
instruction to find the most common 16-bit patterns. The most frequently used patterns are tagged for 
insertion in a decode table. Infrequently used instructions are tagged as not compressed. The 16-bit 
patterns that match those in the decode table are stored in the compressed code image, along with 
uncompressed instructions. The decode table is loaded into the decompression conan: before 
attempted execution of the compressed instruction streams. 


After the decode table is built, a compiled code image is compressed, using a scheme employing a 
tag and an index. The decompression controller generates an address into the decode table to select 
the original 16-bit pattern. 
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The compression software stores compressed and uncompressed instructions in 64-byte blocks, 
called compression blocks. The number of bytes used to store compressed code varies in each 
compression block, depending on the encoding. Because the length resulting compressed block 
varies, the compression software generates an index table that translates addresses of 
uncompressed 64-byte blocks, called target instruction addresses (TIAs), to addresses of the 
compressed variable length blocks. The index table also contains information indicating, for each 
‘block, whether the compression block was compressed or left uncompressed. The index table is 
loaded into system memory with the compressed blocks of program code. The decompression 
controller accesses the index table when a fetch is made to compressed program space. 


14.1.2 Code Decompression 


The decompression controller is located between the processor core and the SDRAM and EBC 
memory controllers, isolating the memory controllers from the processor local bus (PLB). The 
decompression controller is transparent to the processor core and the memory controllers. The 
processor core side of the decompression controller is a PLB slave to the PLB bus, and the memory 
controller side is a PLB master to the memory controllers. Instruction-side requests for external 
memory go though the decompression controller, and are either intercepted for decompression or 
allowed to pass through unaltered. 


The decompression controller must distinguish between compressed and uncompressed code space. 
To accomplish this, the processor core provides a signal with each instruction memory reference, 
indicating whether the reference is in compressed or uncompressed memory space. The CPU's UO 
storage attribute is used to implement this signal. When address translation is enabled (the IR field of 
the Machine State Register (MSR) is 1), a corresponding UO bit is implemented in translation 
lookaside buffer (TLB) entries in the memory management unit (MMU). When address translation is 
disabled (MSR{IR] = 0, the Storage User-defined 0 Register (GUOR) implements the UO storage 
attribute for memory regions. The UO storage attribute indicates whether a page is marked as 
compressed. 


14.1.3 Instruction Fetches to Compressed Pages 


The decompression controller intercepts instruction fetches to code in uncompressed pages, locates 
the compressed code in memory, and decompresses the instruction stream before forwarding it to the 
processor core. These steps are detailed in the following procedure: 


1. Locate compressed code 
a. Calculate offset into index table. 
b. Retrieve index from index table. 


c. Calculate address of compression block using the index table entry. 
d. Retrieve compression block. 


2. Decode instructions into the output buffer, if required. 
3. Return instructions to the processor core. 


The decompression controller contains a 64B output buffer that stores instruction words as they are 
decompressed. Because code is compressed and decompressed in 64B blocks and the CPU 
requests smaller line fills (82 bytes), some accesses to compressed instructions may already be 
available in the decompression controller output buffer, decompressed and ready for execution. In this 
case, line fill requests are serviced from the output buffer, without having to address external memory. 
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Step 2, above, indicates that compressed code is decoded “if required.” Some compression blocks do 
not contain compressed code, even though they reside in compressed code space. The compression 
algorithm can infrequently result in blocks that are larger than the original code. In such cases, the 
compression software does not compress the instruction block and marks it as uncompressed. The 
decoder will not attempt to decompress such blocks. 


14.1.4 Instruction Fetches to Uncompressed Pages 


The decompression controller does not intercept instruction fetches to code in uncompressed 
memory space. These fetches are passed, unaltered, to the appropriate memory controller. The 
decompression controller also provides unaltered data, from the appropriate memory controller, back 
to the CPU in the case of a read. This transaction does not incur any additional latency. 


14.1.5 Performance 


The decompression controller is designed so that read/write requests to uncompressed memory 
spaces incur no additional latency over a system without a decompression controller. 


The decompression controller adds additional latency to some read accesses to compressed 
memory space. The decompression controller requires additional cycles to locate compressed code, 
fetch it, decode the instructions, and place them in the output buffer. However, because instructions 
are encoded in 64-byte compression blocks, the decompression controller continues to decompress 
instructions until its 64-byte output buffer is full. In such cases, the decompression controller acts as a 
prefetch buffer, and subsequent fetches to instructions in the same 64-byte block actually incur less 
latency than if the decompression controller were not present. 


More significant latencies occur when the processor core executes a branch out of the current 64- 
byte block. If the branch is to a TIA that is not at the beginning of a 64-byte block, the decompression 
controller must fetch and decode the block containing the TIA, byte by byte, until it reaches the 
desired instruction. The worst latencies occur when the TIA is outside of the 128-byte group, since the 
decompression core must then go through its entire decode process, including a refetch of the index 
table entry. 


14.2 Decompression Controller Registers 


The registers that control operation of the decompression controller, listed in Table 14-1, are indirectly 
accessed using the Decompression Controller Address Register (DCPO_CFGADDR) and 
Decompression Controller Data Register (DCPO_CFGDATA) listed in Table 14-2. The 
DCPO_CFGADDR and DCPO_CFGDATA are accessed using the mfder and mtder instructions. 


Descriptions of the registers follow Table 14-2. 


The DCPO_CFGADDR stores the address of the target register, while the DCPO_CFGDATA register 
is used to write or read the target register contents. 


The following procedure accesses the decompression controller registers. 
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1. Write the offset from Table 14-2 to the Decompression Controller Address Register 
(DCPO_CFGADDR). 


2. Read data from or write data to the Decompression Controller Data Register (DCPO_CFGDATA). 


Table 14-1. DCRs Used to Access the Decompression Controller Registers 


DCR 
Register Address Description 


DCPO_CFGADDR 0x014 Decompression Controller Address Register 
DCPO_CFGDATA 0x015 Decompression Controller Data Register 


Table 14-2. Offsets for Decompression Controller Registers 


[Register [offset Rw Description 
DCPO_ITORO Index Table Origin Register 0 
DCPO_ITOR1 Index Table Origin Register 1 


Index Table Origin Register 2 


igi 

Index Table Origin Register 3 
DCPO_ADDRO Address Decode Definition Register 0 

3 


nw 
pF ___[Becompression ContoferID Register 
[FR ___[ Becompression Controller Version Register 
[OCPO_PLBBEAR | O60 |__| Bus ErrorAddress Register PLB) =| 
[RBs Error Address Register (EBC/SDRAM) | 


DCPO_RAMO- 0x400-0x7FF R/W SRAM/ROM Read/Write 


14.2.1 Index Table Origin Registers (DCPO_ITORO—DCPO_ITOR3) 


DCPO_ITORO-—DCPO_ITOR3 each contain the high-order address bits of the index table for a 
compression region. 


ITO 


Figure 14-1. Decompression Index Table Origin Registers (DCP0_ITORO-DCPO_ITOR3) 


Index Table Origin High-order index table address bits 
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14.2.2 Decompression Address Decode Definition Registers (DCPO_ADDRO- 
DCP0O_ADDR1) 


DCPO_ADDRO-DCPO_ADDA1 each define an address space used by the decompression controller 
for compressed instructions, and for uncompressed accesses that’are passed to a memory controller. 


DRBA DREN 


pe BO NN OIG in es et ee RT 


DRS 


Figure 14-2. Decompression Address Decode Definition Registers (DCP0_ADDRO-— 
DCP0_ADDR1) 


| 0:9 | DRBA | Decode Region Base Address High-order decode region address bits 


12:15 Decode Region Size 
0000-0100 Reserved 
0101 4MB 
0110 8MB 
0111 16MB 
1000 32MB 
1001 64MB 
1010 128MB 
1011 256MB 
1100 512MB 
1101 1GB 
1110 2GB 
1111 4GB 


DRS 
pea Rees 


31 DREN | Enable Decode Region 
0 Decoding is disabled for region 
1 Decoding is enabled for region. 


14.2.3 Decompression Configuration Register (DCPO_CFG) 
DCP0_CFG is used to configure the operation of the decompression controller. 


DCP0_CFG|IKB] must be set to 0 to enable decompression. The value of this field determines 
whether the UO storage attribute is recognized; the storage attribute must be recognized for 
decompression to occur. 
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SDLY CDB 


SLEN IKB 


Figure 14-3. Decompression Controller Configuration Register (DCPO_CFG) 


[oar [resend 
18:27 | SLDY | Sleep Delay Sleep delay 


SLEN | Sleep Enable 
0 Disable sleep 
1 Enable sleep 


DB | Clear Decompression Buffer Self-clearing; always reads 0 
0 Normal operation 
1 Clear decompression buffer 


Reserved 


0 Decompression is enabled; UO storage 
attribute is recognized 

1 Decompression is disabled; U0 storage 
attribute is ignored 


IKB Enable Decrompression 


14.2.4 Decompression Controller ID Register (DCPO_ID) 


DCP0_ID contains the decompression controller ID. 


Figure 14-4. Decompression Controller ID Register (DCPO_ID) 
0:31 | | Decompression Controller ID Read-only, value is 0000504D 


14.2.5 Decompression Controller Version Register (DCPO_VER) 


DCPO_VER contains the decompression controller version. 
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Figure 14-5. Decompression Controller Version Register (DCPO_VER) 
0:31 [c= od Decompression Controller Version Read-only, value is 00000200 


14.2.6 Decompression Controller PLB Error Address Register (DCPO_PLBBEAR) 


On an error, DCPO_PLBBEAR contains the address on the PLB that caused the decompression 
controller to generate cycles to the SDRAM and EBC memory controllers. 


oO 
w 
= 


Figure 14-6. Decompression Controller PLB Error Address Register (DCPO_PLBBEAR) 


| 0:31 f | Address of PLB Error 


14.2.7 Decompression Controller Bus Error Address Register (DCPO_MEMBEAR) 


On an error, DCPO_MEMBEAR contains the address, presented to the memory controllers, that caused an 
error in the decompression controller. The address was presented to the memory controllers for either an 
ITE fetch or a block burst request. 


[o) 
QW]. 
—_ 


Figure 14-7. Decompression Controller Bus Error Address Register (DCPO_MEMBEAR) 


| 03st | | Address of SDRAM or EBC Error 


14.2.8 Decompression Controller Error Status Register 0 (DCPO_ESR) 
DCPO_ESR reports error status. 
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Status information includes error type and master read/write status. DCPO_ESRO field and 
DCPO_PLBBEAR or DCPO_MEMBEAR lock status is also reported. 


DETO 


14-8 


ALO RW1AL1 


DET1 FL1 DET2 FL2 


oO 21S 4]s[e Sa poipe  aepepe aoe eaea TT 


Decompression Error Type for Master 0 

000 Time-out during ITE fetch 

001 Time-out during block fetch 

010 Memory controller error during ITE 
fetch 

011 Memory controller error during block 
fetch 

100-111 Reserved 


Read/Write Status for Master 0 
O Error operation was a write 
1 Error operation was a read 


DCPO_ESR Field Lock for Master 0 
O DCPO_ESR fields are unlocked 
1 DCPO_ESR fields are locked 


DCPO_MEMBEAR/DCP0_PLBBEAR 

Address Lock for Master 0 

O Master has not locked 
DCPO_MEMBEAR and 
DCPO_PLBBEAR 

1 Master has locked DCPO_MEMBEAR 
and DCPO_PLBBEAR 


Decompression Error Type for Master 1 


Read/Write Status for Master 1 
0 Error operation was a write 
1 Error operation was a read 


DCPO_ESR Field Lock for Master 1 
O DCPO_ESR fields are unlocked 
1 DCPO_ESR fields are locked 


DCPO_MEMBEAR/DCP0O_PLBBEAR 

Address Lock for Master 1 

O Master has not locked 
DCPO_MEMBEAR and 
DCPO_PLBBEAR 

1 Master has locked DCPO_MEMBEAR 
and DCPO_PLBBEAR 
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RW2 AL2 


DET3 FL3 


Master 0 is the processor core instruction 
cache unit (ICU). 


This implementation only reports errors for 
compressed reads. 


DCPO_ESR register fields are locked when 
the PLB_lockErr signal was active in the 
cycle in which the error occurred. 


DCPO_MEMBEAR and DCP0_PLBBEAR 
are locked to this master address when the 
PLB_lockErr signal was active in the cycle 
in which the error occurred. 


See description for DCPO_ESR[DETO]. 
Master is the processor core data cache 
unit (DCU). 


This implementation only reports errors for 
compressed reads. 


DCPO_ESR register fields are locked when 
the PLB_lockErr signal was active in the 
cycle in which the error occurred. 


DCPO_MEMBEAR and DCPO_PLBBEAR 
are locked to this master address when the 
PLB_lockErr signal was active in the cycle 
in which the error occurred. 


Preliminary 


DCPO_ESR Field Lock for Master 2 DCPO_ESR register fields are locked when 
0 DCPO_ESR fields are unlocked the PLB_lockErr signal was active in the 
1 DCPO_ESR fields are locked cycle in which the error occurred. 
17 AL2 | DCPO_MEMBEAR/DCP0O_PLBBEAR DCPO_MEMBEAR and DCP0_PLBBEAR 
Address Lock for Master 2 are locked to this master address when the 
| 4 Master has locked DCPO_MEMBEAR 
and DCPO_PLBBEAR 
18:20 | DET3 | Decompression Error Type for Master 3 See description for DCPO_ESR[DETO]. 
Master 3 is PCI. 
21 RWS | Read/Write Status for Master 3 This implementation only report errors for 
O Error operation was a write compressed reads. 
1 Error operation was a read 
ia ad DCP0_ESR Field Lock for Master 3 DCPO_ESR register fields are locked when 
Address Lock for Master 3 are locked to this master address when the 
0 Master has not locked PLB_lockErr signal was active in the cycle 
DCPO_MEMBEAR and in which the error occurred. 
DCPO_PLBBEAR 
1 Master has locked DCPO_MEMBEAR 


0 Master has not locked PLB_lockErr signal was active in the cycle 
0 DCPO_ESR fields are unlocked the PLB_lockErr signal was active in the 
23 AL3 
and DCPO_PLBBEAR 


Facial 14 | DET2 | Decompression Error Type for Master 2 See description for DCPO_ESR[DETO]. 
Master 2 is the external master. 
DCPO_MEMBEAR and in which the error occurred. 
1 DCPO_ESR fields are locked cycle in which the error occurred. 


RW2 | Read/Write Status for Master 2 This implementation only reports errors for 
O Error operation was a write compressed reads. 
1 Error operation was a read 
DCPO_PLBBEAR 
DCPO_MEMBEAR/DCP0_PLBBEAR DCPO_MEMBEAR and DCPO_PLBBEAR 
For more information, refer to CodePack™ PowerPC Code Compression Utility User's Manual, Version 3.0. 
Preliminary Decompression Controller Operation 14-9 


14-10 PPC405GP User’s Manual Preliminary 


Part IV. PPC405GP External Interfaces 


Preliminary 


IV-1 
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Chapter 15. SDRAM Controller 


The SDRAM controller provides a 32-bit interface to SDRAM memory with optional Error Checking 
and Correction (ECC). The memory controller provides flexible, fully programmable timings for 
interfacing to a wide variety of SDRAM devices. It supports four physical banks of dual- or quad-bank 
SDRAMs, where each physical bank is from 4 MB to 256 MB in size. In addition, the SDRAM 
controller supports the use of registered SDRAMs. 


The controller supports page mode operation with bank interleaving and maintains up to four open 
pages. To improve performance, the controller features separate 32-byte read and 128-byte write 
buffers. For applications where data integrity must be guaranteed, optional ECC provides standard 
single error correction and double error detection. Designers also have the opportunity to reduce 
system power by placing the SDRAM controller in sleep and/or self-refresh mode. 


15.1 Interface Signals 


In many systems the memory controller can directly interface to SDRAM, relieving designers from the 
need to buffer signals or add circuitry to phase adjust the SDRAM clock. However, since each 
application is different, a detailed timing analysis should always be performed. Please note that all of 
the signals on the SDRAM interface utilize industry standard bit and byte lane numbering. That is, 
MemData0 is the least significant bit and DQMO is the enable for the MemData7:0. 


Figure 15-1 illustrates the SDRAM signal I/Os. 


SDRAM 
Controller 


MemClkOut1:0 
ClkEn1:0 


BA1:0 
MemAddr1 2:0 
> BankSel3:0 
RAS 

CAS 

WE 


PLB 


MemData31:0 
DQM3:0 


> ECC7:0 
> DQOMCB 


Configuration . 


Deneve Registers 


Figure 15-1. SDRAM Controller Signals 
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The usage and signal state after a PPC405GP reset for each of these signals is shown in Table 15-1 
on page 15-2. 


Table 15-1. SDRAM Signal Usage and State During/Following Reset 


[Sionat [Resersiate] awe 
MemCIkOut1:0 | Toggling’ Two copies of the SDRAM clock. 
ClIkEn1:0 SDRAM clock enable. 


BA1:0 2’b0 Bank address. Used to. select an internal SDRAM bank in dual- and 
quad-bank SDRAM devices. 

MemAddr12:0 | 13b’0 Memory address. See Table 15.3.5, “Logical Address to Memory 
Address Mapping,’ on page 15-8 for additional details. 

BankSel3:0 4b’1 Bank Selects. Used to select between different physical banks of 
SDRAM memory. 


A am. | Row Address Strobe. 


Column Address Strobe. 
Write Enable. 


MemData31:0 | High-Z Data input/output. MemData31 is the most significant bit. 


DQM3:0 1 ‘Data Mask, an input mask for write accesses and an output enable 
during read operations. DQM3 applies to MemData31:24, DQM2 to 
MemData23:16, DQM1 to MemData15:8 and DQMO to MemData7:0. 


High-Z ECC check bits. 
DQMCB 1 | Data Mask for ECC check bits. 


Note 1: During power-up, MemClkOut1:0 tracks SysClk until the internal PLL begins to lock. At that 
time MemClkOut1:0 transitions to the clock rate configured via the strapping resistors. 


RAS 
CAS 
WE 


15.2 Accessing SDRAM Registers 


After a system reset, software is required to configure and then enable the SDRAM controller. When 
this is complete, the SDRAM memory is ready for access by the processor, or any other master in the 
PPC405GP. Once the controller is operating, it is usually not necessarily for software to access the 
SDRAM configuration registers. The status registers, however, are useful for determining the state of 
the memory controller or querying information regarding any corrected or uncorrectable ECC errors 
that may have occurred. 


All SDRAM configuration and status registers are accessed using the mtder and mfder PowerPC 
instructions. Access to these registers is performed using an indirect addressing method through the 
SDRAMO_CFGADDR and SDRAMO_CFGDATA registers. 


Table 15-2. SDRAM Controller DCR Addresses 


DCR Address | Access | Description 
SDRAMO_CFGADDR 0x010 SDRAM Controller Address Register 
SDRAMO_CFGDATA 0x01 1 SDRAM Controller Data Register 
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Table 15-3 lists the indirectly accessed SDRAM configuration and status registers. 


Table 15-3. SDRAM Controller Configuration and Status Registers 


[Winemonie [Address Offset[Access [Description Page 
[SORANO_BESAT | 0x08 | RlClear [Bus Eror Syndrome Register? | 15-18 
SDRAWO_CFG 
[SORAWO_STATUS | __oxe¢__|_A_|[SDRAMContoler Stas —_——_—=i 88 
[SORAWO_PMIT___ | __Ox94__ | _RIW [Power Management idle Timer | 1620 
158 
[SORAWO_ECOOFE [ore [ AW [ECC Configuraion ____—_—=«d TSA 
PSORAWO_ECCESR | owe | _R_[ECCErorStaus __—=~SCSCS~*wr TST 


To read or write one of these SDRAM controller registers, software must first write the register’s 
address offset into the SDRAMO_CFGADDR register. The target register can then be read or written 
through the SDRAMO_CFGDATA DCR address. The following PowerPC code illustrates this 
procedure by reading the SDRAMO_CFG register. 


li r3,SDRAMO_CFG ! address offset of SDRAMO_CFG 
mtdcr SDRAMO_CFGADDR, r3 ! set offset address 
mfdcr r4, SDRAMO_CFGDATA ! read value of SDRAMO_CFG 


Programming Note: Reserved fields in SDRAM controller configuration registers must not 
change when the register is written. To modify bit fields within a register, read the register, use a 
mask to clear the target bits, OR in the new field value, and then write the result back. 


15.3 SDRAM Controller Configuration and Status 


Software must program a number of SDRAM control registers before the SDRAM controller can be 
started and memory accessed. At a minimum, this involves writing to the SDRAM Configuration 
Register (SDRAMO_CFG), SDRAM Timing Register (SDRAMO_TR) and one or more Memory Bank 
Configuration Registers (SDRAMO_BnCR). 


15.3.1 Memory Controller Configuration Register (SDRAMO_CFG) 


After a system reset the SDRAM controller is disabled and must be configured before memory 
transactions can occur. The Memory Controller Configuration Register (SDRAMO_CFG) serves to 
both enable the controller and select from various memory controller features. These features include 
enabling power management, ECC error checking, and registered SDRAM support. Each of these 
settings is global and applies to the entire SDRAM subsystem. 


Prior to enabling the SDRAM controller by setting SDRAMO_CFG[DCE], the SDRAMO_TR, 
SDRAMO_RTR, SDRAMO_PMIT, and SDRAMO_BnCR registers must be configured. This is because — 
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once SDRAMO_CFG[DCE]=1 writing any of the listed SDRAM registers does not actually update the 
target register. Write access to SDRAMO_CFG is independent of SDRAMO_CFG[DCE]. However, 
software must ensure that the SDRAM controller is idle when updating SDRAMO_CFG[3:10]. This 
guarantees that the register update does not affect any in-progress SDRAM operations. 


Before software enables the SDRAM controller by setting SDRAMO_CFG[DCE] it must ensure that 
the SDRAM power-on delay has been satisfied. For example, the IBM 16MB SDRAM requires a 
100us pause; the 64MB SDRAM requires a 200us pause. Once enabled, the SDRAM controller 
automatically performs the following initialization procedure: 


1. Issues the precharge command to all banks. 
2. Waits SDRAMO_TRIPTA] cycles. 


3. Performs eight CAS before RAS refresh cycles, each separated by SDRAMO_TR[RFTA] clock 
cycles) 


4. Issues the mode register write command to each bank. 


5. Perform eight CAS before RAS refresh cycles (each separated by SDRAMO_TR[RFTA] clock 
cycles). 


6. Waits SDRAMO_TR[RFTA] clock cycles. 


The SDRAM is then available for read and write access. 


REGEN EMDULR 


DCE PME BRPF 


OTT[2[3]4[5 6[7 SSO 


SRE 
MEMCHK 


DRW ECCDD 


Figure 15-2. Memory Controller Configuration (SDRAMO_CFG) — 


SDRAM Controller Enable All SDRAM controller configuration 
0 Disable registers must be initialized and valid prior to 
1 Enable setting DCE. 


Self-Refresh Enable See “Self-Refresh” on page 15-19. 
0 Disable 
1 Enable 


Power Management Enable See “Power Management” on page 15-20. 
0 Disable 


1 Enabled 


3 MEMCHK | Memory Data Error Checking See “Error Checking and Correction (ECC)” 
0 None on page 15-14. 
1 ECC 
4 REGEN | Registered Memory Enable 
0 Disabled 
1 Enabled 
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i= EMDULR 


SDRAM Width 
00 32-bit 

01 Reserved 
10 Reserved 
11 Reserved 


Burst Read Prefetch Granularity 
00 Reserved 

01 16 bytes 

10 32 bytes 

11 Reserved 


ECC Driver Disable 


0 Check bit data output on ECC7:0. 


1 ECC7:0 are placed in high-Z state. 


Enable Memory Data Unless Read 

0 MemData0:31 are high-Z unless a 
memory write is being performed. 

1 MemData0:31 are driven unless a 
memory read is being performed. 


Reserved 


Must be set to 2’b00. 


Most applications should set with field to 
2’b01. 


Regardless of whether ECC checking is 
enabled, SDRAM writes cause the 
PPC405GP to output check bit data on 
ECC7:0. If ECC is not used, setting 
ECCDD=1 disables these drivers. 


15.3.2 Memory Controller Status (SDRAMO_STATUS) 


The Memory Controller Status Register (SDRAMO_STATUS) allows software to determine the current 
state of the SDRAM controller. If SDRAMO_STATUS[MRSCMP]=0 the SDRAM is not accessible for 

either read or write operations. Similarly, the SDRAM is also inaccessible when the SDRAM is in self- 
refresh mode, SDRAMO_STATUS[SRSTATUS]=1. 


MRSCMP 


SRSTATUS 


Figure 15-3. Memory Controller Status (SDRAMO_STATUS) 


SRSTATUS | Self-Refresh State 
0 Not in Self-Refresh Mode 
1 Self-Refresh Mode 


Reserved 


Set to 1 when the SDRAM controller completes 
the Mode Register Set Command, which results 
from setting SDRAMO_CFG[DCE]. 

Clearing SDRAMO_CFG[DCE] causes this bit to 
clear in the following MemClkOut1:0 cycle. 


See “Self-Refresh” on page 15-19. 


MRSCMP Mode Register Set Complete 
0 MRS not complete 
1 MRS completed 
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15.3.3 Memory Bank 0-3 Configuration (SDRAMO_BOCR-SDRAMO0_B3CR) 


These registers are used to configure and enable memory in each respective bank. Only SDRAM 
banks with SDRAMO_BnCR[BE]=1 are initialized when SDRAMO_CFG[DCE] is set to 1 and 
subsequently available for access. Since the SDRAMO_BnCR registers cannot be modified when 
SDRAMO_CFG[DCE]=1, adding or removing memory banks es that the SDRAM controller be 
disabled and then reinitialized. 


[NE] 2S eT 


$Z BE 


The base address must be aligned on 
a.boundary that matches the size of 


Figure 15-4. Memory Bank 0-3 Configuration Registers (SDRAMO_BOCR-SDRAMO0_B3CR) 
the region as defined by the SZ field. 
For example, a 4MB region must begin 


BA Base Address 
on an address that is divisible by 4MB. 


tort [Reserved tC“ C—C‘Cs‘izC 

12:14 SZ Size 
000 4M byte 
001 8M byte 
010 16M byte 
011 32M byte 
100 64M byte 
101 128M byte 
110 256M byte 
111 Reserved 

| 15 [aa | Reserved 

16:18 AM Addressing Mode 
000 Mode 1 
110 Mode 7 
111 Reserved 

1930 [| Reseed OC ss—‘CSCSCisOCY 


001 Mode 2 
all Memory Bank Enable 


See “SDRAM Addressing Modes” on 
page 15-7. 


100 Mode 5 
101 Mode 6 


010 Mode 3 
011 Mode 4 

0 Bank is disabled 
1 Bank is enabled 
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Table 15-4. SDRAM Addressing Modes 


Addressing SDRAM 
Mode Memory Organization 
11x9 -2Bank 
11x 10 - 2 Bank 
12x9 -4 Bank 
12 x 10 - 4 Bank 
13x9 -4 Bank 


13 x 10 - 4 Bank 
13 x 11 - 4 Bank 


12 x 8 - 2 Bank 
12x 8-4 Bank 
13 x 8 - 2 Bank 


11x 8-2 Bank 
11x 8-4 Bank 
13x 8 - 2 Bank 
13 x 8 - 4 Bank 
13x9 -2 Bank 
13 x 10 - 2 Bank 


15.3.4 Page Management 


The SDRAM controller supports page mode operation with bank interleaving and maintains up to four 
open pages in the memory subsystem. The SDRAM controller page management unit (PMU) tracks 
memory accesses (activate, read/write, precharge, and refresh) and maintains a directory of up to 
four open pages. All PMU entries are allocated and deallocated based on current and pending 
accesses. Allocated entries are checked against the address of the pending access, and a page hit 
occurs when a match exists. All PMU directory entries are dealocated when a CAS before RAS 
refresh occurs. 


Open pages can be spread across the system memory array on different bank selects (BankSeln) or 
be contained in a single bank select, depending on the memory access sequences and the memory 
subsystem implementation. For a single bank memory subsystem, the number of open pages is 
limited to the number of internal banks associated with the SDRAM devices in that bank. For 
example, a single bank implementation consisting of SDRAMs with two internal banks can have two 
open pages. In this case, the maximum of two open pages is a limitation of the memory subsystem 
implementation, not the SDRAM controller. 


The SDRAM page size for page hits varies, depending on the address mode programmed in 
SDRAMO_BnCR[AM]. Table 15-5, “SDRAM Page Size,” on page 15-7 details the relationship of the 
address mode to the page size. 


Table 15-5. SDRAM Page Size 
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15.3.5 Logical Address to Memory Address Mapping 


SDRAM memory requires that addresses be divided into row and column portions. The relationship 
between a logical address and the SDRAM row and column address is determined by the address 
mode programmed in SDRAMO_BnCR[AN] and is shown in Table 15-6. 


. Table 15-6. Logical Address Bit on BA1:0 and MemAddr12:0 Versus Addressing Mode. 


Organization’ | Phase fa fofiziijwolal/el7je/s{4]s]j2i1[o 
1 [| amp | Row [7 | 9] 7 [9 {10/11 [12] 13] 14] 15 | 16 | 17 | 18 | 19 | 20 
Tiixex2 [Gouna [7 Le bro [are [2 [222 [ze [os [25 er [ee [20 
econ tonnes ascaesemaeiees 
Tixtoxe [eoume tr Le brs [nels [er [ze [ooze [es 25 [er [25 |e 
2 | semB_ | Row [7 [817 | 9 |10/11[ 12] 13 | 14[ 15] 16 | 17 | 18 | 19 | 20, 
Tiaxexa [Coun [7 Le [7 [allan [ele [22 [es [2x [as 26 [ar [oe [28 
| Bet fs pope ites 
Tiax10x4 Gouna [7 Lez balers [2 [2] 2 [oe 25 [os [er [ze [ae 
| 64mB | Row [6 | 7] 8 [9 | 10] 11 | 12] 13] 14 | 15 | 16 | 17 | 18 | 19 | 20 
isxaxca [Coun [6 [7 [bailar [sila [22 | [20 [as 26 [zr | [20 
| 12eMB_ | Row [6 | 7] 8 | 9 [10] 11] 12/13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 
Tiaxioxa [oom fe [7 pba ars [ar |= [es [2a [25 [oe [ar [25 [20] 
| 256MB | Row [6 | 7] 8 | 9 | 10] 41 | 12/43 | 14] 15 | 16 | 17 | 18 | 19 | 20] 
Pisx trea [Gaim Le [7 [7 Le? [ars [21 [oo [25 [or [2s [oe [er 28 [ao] 
ee aaa 
Cyexaxan [Coumn [o [ar[e [a lar 6 [zr [ze [2s [28 [os [25 [or [25 
oe ooo 
aixex2% [Coun fo 2rfo [2rlae| efor] ze [es] ze [sz [er [zs ao 
Oe ee oe eee ee actectosterteetop 
ise ea [Coun [7 [are [at|ar falar [22 2 [2s [os [25 [ar [25 [ae 
7 | semMB | Row [7 | 7 [8 | 9 | 10] 14 | 12/13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 
isxox2 feoune fr [7 7 [a lar o ler [ze es] ze [es|z6 [er [28 [22 
| e4mB | Row [7 | 7] 8 [9 [10] 11/12] 13] 14] 15 | 16 | 47 | 18 | 19 | 20 | 
Ta 02 [ooume [br [7 Laer [2 [ee [ze [os [26 [er [25 [ao 


Note 1: Memory organization is the number of rows x columns x internal banks. 


Note 2: Column address bit 10 sent out on MemAdadr11 for 13 x 11 x 4 parts. 


Note 3: All read operations transfer 64-bits from SDRAM memory to the controller. Therefore, 
MemAddr0 is first driven with 0 and then 1. For data items narrower than 64-bits, the 
requested byte(s) are fulfilled from the 64-bit doubleword. 
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15.3.6 SDRAM Timing Register (SDRAMO_TR) 


The SDRAM Timing Register sets the timing parameters for all SDRAM memory banks. This register 
must be written prior to setting SDRAMO_CFG[DCE]. lf SDRAMO_CFG[DCE]=1, writes to this 
register appear to complete, but do not affect the contents of SDRAMO_TR. 


If the SDRAM interface is operated in registered mode, (SDRAMO_CFG[REGE]=1) a programmed 
CAS latency of 2 clocks (SDRAMO_TR[CASL] = 2‘b01) corresponds to a registered CAS latency of 3 
clocks, and a programmed latency of 3 clocks (SDRAMO_TR[CASL] = 2‘b10) corresponds to a 
registered CAS latency of 4 clocks. Programming the CAS latency to 4 clocks (SDRAMO_TR[CASL] = 
2'b11), corresponding to a registered CAS latency of 5 clocks, is not supported. 


See “Selected Timing Diagrams” on page 15-10 for timing diagrams illustrating how the fields in 
SDRAMO_TR affect the signalling on the SDRAM memory interface. 


PTA LDF RCD 


Ce? SSE ls ee vera? Bafs0 31 


CASL CTP RFTA 


Figure 15-5. SDRAM Timing Register (SDRAMO_TR) 


es [ewes 


CASL | SDRAM CAS latency. 
00 Reserved 
01 2 MemClkOut1:0 cycles 
10 3 MemClkOut1:0 cycles 
11 4 MemClkOut1:0 cycles 


Pa 


12:13 SDRAM Precharge Command to next 

Activate Command minimum. 
00 Reserved 

: ; 

16:17 

10 3 MemClkOut1:0 cycles 

11 4 MemClkOut1:0 cycles 


01 2 MemClkOut1:0 cycles 
| 18:26 | 26 | 18:26 | | Reserved 


10 3 MemClkOut1:0 cycles 
11 4 MemClkOut1:0 cycles 


SDRAM Read / Write Command to 
Precharge Command minimum. 

00 Reserved 

01 2 MemClkOut1:0 cycles 
10 3 MemClkOut1:0 cycles 
11 4 MemClkOut1:0 cycles 


SDRAM Command Leadoff. 
00 Reserved 
01 2 MemClkOut1:0 cycles 
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27:29 | RFTA | SDRAM CAS before RAS Refresh 
Command to next Activate Command 
minimum. 

000 4 MemClkOut1:0 cycles 
001 5 MemClkOut1:0 cycles 
010 6 MemClkOut1:0 cycles 
011 7 MemClkOut1:0 cycles 
100 8 MemClkOut1:0 cycles 
101 9 MemClkOut1:0 cycles 
110 10 MemClkOut1:0 cycles 
111 Reserved 


30:31 RCD | SDRAM RAS to CAS Delay 
00 Reserved - 
01 2 MemCIkOut1:0 cycles 
10 3 MemCl!kOut1:0 cycles 
11 4 MemClIkOut1:0 cycles 


15.3.7 Selected Timing Diagrams 


The SDRAM controller is capable of performing many different types of read and write operations. For 
example, while the CPU generally issues four doubleword line fills and line writes, the EBC external 
master interface can issue various types of burst transactions. Since the SDRAM controller is often 
servicing read and write requests from several masters, the exact sequence of operations on the 
external SDRAM interface cannot be predicted. Therefore, the timing diagrams in this section should 
be considered as examples of the signalling that can be observed on the SDRAM interface, and not 
the only types of transactions that occur. 


The timing diagrams in this section are intended to illustrate cycle-based SDRAM programmable 
timing parameters only. As such, AC specific timing information should not be inferred from the timing 
diagrams. Instead, please refer to the PPC405GP data sheet for AC specifications. 


Table 15-7 summarizes the SDRAM memory timing parameters used to annotate the waveforms. 
These parameters.are set in the SDRAM Timing Register (SDRAMO_TR). 


Table 15-7. SDRAM Memory Timing Parameters 


RCD | Activate to Read/Write | Minimum number of clock cycles from an activate command to a read 
Command or write command. Corresponds to SDRAM RAS to CAS assertion 
delay. 


RFTA | Refresh to Activate Minimum number of clock cycles from a CAS before RAS refresh 
command to the next activate command. 
CTP | Command to Minimum number of clock cycles from a read or write command toa 
Precharge precharge command. 
PTA | Precharge to Active Minimum number of clock cycles required to wait following a 
Precharge Command to issuing the next activate command. 
CASL | CAS Latency CAS access latency. 


Command Leadoff Number of clock cycles from address/command assertion to bank 
Delay 


select (BankSeln) assertion. 
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Figure 15-6. Activate, Four Word Read, Precharge, Activate 
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Figure 15-7. Activate, Four Word Write, Precharge, Activate 
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Figure 15-9. CAS Before RAS Refresh 
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MemClkOut1:0 
ClkEn1:0 
BA1:0 
MemAddr1 2:11 
MemAddr10/AP 


MemAddr9:0 


a Auton 
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RAO is 


DQM3:0, DQMCB 


Precharge all Self ve Exit 
(if necessary) 


Figure 15-10. Self-Refresh Entry and Exit 


15.3.8 Auto (CAS Before RAS) Refresh 


Refresh of odd memory banks is staggered from the refresh of even memory banks. Only enabled 
SDRAM banks (SDRAMO_BnCR[BE]=1) are initialized when the controller is enabled 
(SDRAMO_CFG[DCE] set to 1) and refreshed during normal operation. Once the memory controller 
is enabled and the initialization sequence has completed, the refresh mechanism starts automatically 
with refreshing of the memory continuing independent of SDBRAMO_CFG[DCE]. 


Refresh requests are generated internally when the refresh timer expires. The refresh interval is 
programmable via the Refresn Timer Register (SDRAMO_RTR). During refresh, all SDRAM accesses 
are delayed until the refresh cycle completes. 


15.3.9 Refresh Timer Register (SDRAMO_RTR) 


The Refresh Timer Register determines the memory refresh rate for the SDRAM. The internal 
counter runs at the controller clock frequency, thus if MemClkOut1:0 is 100MHz, a value of OxO5FO 
produces a refresh interval of 15.20 s (1520 x 10 ns = 15.20s). This register is progammable to 
accommodate other SDRAM clock frequencies. 
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Interval Reset value is 0600010111110 (that is, 
Programmable between 0b00000000000 Ox05F0 for the complete 16-bit field) 
and 0611111111111 (that is, Ox0000 to 

Ox3FF8 for the complete 16-bit field). 


13:15 aie Always 0b000 


15.4 Error Checking and Correction (ECC) 


Error Checking and Correction (ECC) corrects all single bit errors and detects all double bit errors 
when reading from SDRAM memory. In addition, ECC detects any and all errors which may exist in an 
aligned 4-bit nibble. As detailed in Table 15-8, “Additional Latency when using ECC,” on page 15-14, 
the ECC function is transparent in terms of latency, except for partial write operations. On partial 
writes, a read-modify-write sequence, including bus turn-around, is required to generate the write 
check bits and store the resultant data. 


Table 15-8. Additional Latency when using ECC 


ECC is enabled for all SDRAM banks by setting SDRAMO_CFG[MEMCHk]=1 during the SDRAM 
initialization procedure. Software is then required to write each word of SDRAM to set the check bits 
to a valid state. When this is complete, ECC checking and correction is enabled on a per-bank basis 
through the SDRAMO_ECCCFG register. 


15.4.1 ECC Configuration Register (SDRAMO_ECCCFG) 


Write access to SDRAMO_ECCCFG is independent of SDRAMO_CFG[DCE]. Software must ensure 
that the SDRAM controller is idle when updating SDRAMO_ECCCFG. This guarantees that the 
register update does not affect any in-progress SDRAM operations. 
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Figure 15-12. ECC Configuration Register (SDRAMO_ECCCFG) 


Cer [awed 


8:11 CEn ECC Correction Enable for bank n. When CEn is set, ECC correction is 
0 Disabled enabled for bank n (BankSeln). When 
1 Enabled cleared, the ECC logic ignores the check 
bits and passes read data along 
unmodified. 
pest | [Reseed 


15.4.2 Correctable ECC Errors 


During SDRAM memory read operations the ECC logic automatically detects and corrects any single 
bit error that occurs within each 32-bit word of SDRAM memory. This includes errors detected during 
the read portion of the read-modify-sequence sequence required for partial (less than 64-bit) SDRAM 
writes. 


If a correctable ECC error occurs during a memory read the corrected data is returned to the 
requesting master. When a correctable error is detected during the read portion of a partial write the 
corrected data is combined with the write data and written back to memory with new ECC check bits. 
In both cases, the memory bank (BankSeln) that caused the error is logged in 
SDRAMO_ECCESR[BKnE] and the byte lane that experienced the correctable error is identified in 
SDRAMO_ECCESR[BLnCE]. Furthermore, the correctable error bit (SDRAMO_ECCESR[CE)) is set 
causing an ECC Correctable Error interrupt to the Universal Interrupt Controller. The interrupt 
remains active until software clears SDRAMO_ECCESR[CE]. 


15.4.3  Uncorrectable ECC Errors 


Uncorrectable ECC errors may occur during SDRAM read and SDRAM partial write operations. An 
uncorrectable error detected during a memory read results in the data from system memory 
(unchanged) being returned to the requesting master. An uncorrectable error detected on the read 
portion of a read-modify-write sequence for an SDRAM partial write results in the data from system 
memory (unchanged) being combined with the write data and written back to memory with new ECC 
check bits. 


Whenever an uncorrectable ECC error occurs the errant memory address is captured in 
SDRAMO_BEAR. The error status for the master that initiated the memory operation is logged in 
either SDRAMO_BESRO or SDRAMO_BESR1. The memory bank (BanknSel) that experienced the 
error is recorded in SDRAMO_ECCESR|[BKnE] and an uncorrectable error is flagged via 
SDRAMO_ECCESR[UE]. 
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Since an uncorrectable error also results in an error signal to the master that initiated the transfer, 
other side effects may occur. For example, an instruction fetch with an uncorrectable error causes a 
machine check. in the case of a DMA transfer, the DMA channel stops and an error is logged. 


15.4.4 Error Locking 


The PCI Bridge and Media Access Layer (MAL) controllers may qualify their PLB transactions to the 
SDRAM Controller such that the information describing any errors that occur during these transfers 
becomes locked. When an error is locked, subsequent errors are not permitted to overwrite the 
information detailing the first error. 


When a master requests error locking an error locks not only the SDRAMO_BESRnr field for the 
master, but also SDRAMO_BEAR. These remain locked until software clears them. The SDRAM 
Controller has a SDRAMO_BESRn field for each PLB master containing two bits associated with error 
locking. One is the field lock bit and the other is the address lock bit. When an error is detected with 
locking enabled the field lock bit is set to a value of one. Setting the field lock bit prevents subsequent 
errors for this master from being logged and overwriting the contents of the field. In addition, the 
address lock bit is set if no other master has previously locked the SDRAMO_BEAR. Once the 
SDRAMO_BEAR is locked, no future errors from this or any master can update the SDRAMO_BEAR 
until software clears the lock bits. When software processes an error it should clear the error status 
and both lock bits at the same time. 


15.4.5 ECC Error Status Register (SDRAMO_ECCESR) 


The ECC Error Status Register (SDRAMO_ECCESR) tracks ECC related errors encountered during 
SDRAM memory accesses. Bits in SDRAMO_ECCESR are cleared by writing a 32-bit value to 
SDRAMO_ECCESR with a 1 in any bit position that is to be cleared and 0 in all other bit positions. 


BLnCE ' CE BKnE 


Figure 15-13. ECC Error Status Register (SDRAMO_ECCESR) 


0:3 Byte Lane n Corrected Error 
0 No error 
1 Error occurred in byte lane n 


Reserved 


Error Detected in Check bits 
00 No error 


01 Error in lower check bits 
10 Error in upper check bits 
11 Error in both sets of check bits 


| 10 | CE | Correctable Error 


Uncorrectable Error 
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16:19 BKnE Bank n Error 
O No error 
1 Error occurred in bank n 


I 


15.4.6 Bus Error Address Register (SDRAMO_BEAR) 


The SDRAM Bus Error Address Register (GDRAMO_BEAR) is a 32-bit register containing the 
address of the access where a correctable or uncorrectable ECC error occurred. If the master that 
initiated the transfer requested error locking, and the SDRAMO_BEAR is not already locked, the 
contents of SDRAMO_BEAR are locked until the lock bit in one of the Peripheral Bus Error Status 
Registers (SDRAMO_BESRO or SDRAMO_BESR11) is cleared. The contents of the SDRAMO_BEAR 
are accessed indirectly through the SDRAM_CFGADDR and SDRAMO_CFGDATA registers using the 
mfdcer and mtdcer instructions. 


SDRAMO_BEAR 


Figure 15-14. Bus Error Address Register (SDRAMO_BEAR) 


SDRAMO_BEAR_ | Address of ECC Error. 


15.4.7 Bus Error Syndrome Register 0 (SDRAMO_BESRO) 


This register tracks errors encountered during CPU, external bus master and PCI accesses to 
SDRAM memory. Bits in SDRAMO_BESRO are cleared by writing a 32-bit value to SDRAMO_BESRO 
with a 1 in any bit position that is to be cleared and 0 in all other bit positions. 


EETO EET1 EET2 EET3 FL3 


[O21 8/4 5/6 Bf 90 Ff1214]1516 1718 20/21} 22/23/24 


RWSO RWS1 RWS2 . RWS3 ALS 


Figure 15-15. Bus Error Syndrome Register 0 (SDRAMO_BESR0O) 


0:2 EETO | Error type for master 0 Master 0 is the processor instruction fetcher. 
000 No error 
001 Reserved 
01X ECC uncorrectable error 


1XX Reserved 


3 RWSO | Read/write status for master 0 
0 Error operation was a write operation 
1 Error operation was a read operation 
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| Reserved 


Error type for master 1 Master 1 is the processor data side. 
000 No error 

001 Reserved 

01X ECC uncorrectable error 

1XX Reserved 


Read/write status for master 1 
0 Error operation was a write operation 
1 Error operation was a read operation 


4 Reserved 


= 14 EET2 Error type for master 2 Master 2 is the external bus master. 
000 No error 
001 Reserved 
01X ECC uncorrectable error 
1XX Reserved 


RWS2 | Read/write status for master 2 
0 Error operation was a write operation 
1 Error operation was a read operation 


. [16:17 | Reserved 


18:20 |EETS | Error type for master 3 Master 3 is the PCI bridge. 
000 No error 
001 Reserved 
01X ECC uncorrectable error 
1XX Reserved 


Read/write status for master 3 
O Error operation was a write operation 
1 Error operation was a read operation 


Field lock for master 3 
0 EETS and RWS3 fields are unlocked 
1 EET3 and RWSS fields are locked 


SDRAMO_BEAR address lock for master 3 
0 SDRAMO_BEAR address unlocked 
1 SDRAMO_BEAR address locked 


| Reserved 


15.4.8 Bus Error Syndrome Register 1 (SDRAMO_BESR1) 


This register tracks errors encountered during MAL and DMA accesses to SDRAM memory. Bits in 
SDRAMO_BESR1 are cleared by writing a 32-bit value to SDRAMO_BESR1 with a 1 in any bit 
position that is to be cleared and 0 in all other bit positions. 
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EET4 FL4 EETS5 
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RWS4 AL4 RWS5 


Figure 15-16. Bus Error Status Register 1 (SDRAM0O_BESR1) 


Error type for master 4 Master 4 is the MAL. 
000 No error 

001 Reserved 

01X ECC uncorrectable error 

1XX Reserved 


Read/write status for master 4 
0 Error operation was a write operation 
1 Error operation was a read operation 


Field lock for master 4 
0 EET4 and RWS4 fields are unlocked 
1 EET4 and RWS4 fields are locked 


SDRAMO_BEAR address lock for master 4 
0 SDRAMO_BEAR address unlocked 
1 SDRAMO_BEAR address locked 


EETS | Error type for master 5 Master 5 is the DMA controller. 
000 No error 
001 Reserved 
01X ECC uncorrectable error 
1XX Reserved : 


RWS5 | Read/write status for master 5 
0 Error operation was a write operation 
1 Error operation was a read operation 


A 


15.5 Self-Refresh 


The SDRAM controller supports self-refresh operation for applications desiring lower power. When 
the SDRAM memory is placed in self-refresh mode it is no longer accessible for read or write 
accesses. Prior to placing the SDRAM controller in self-refresh mode all pending and previously 
queued requests targeting the SDRAM controller must be allowed to complete. Self-refresh entry is 
then initiated by setting SDRAMO_CFG[SRE]. When set, the SDRAM controller: 


1. Completes the current SDRAM operation. 

2. Issues precharge all commands to close all open pages. 

3. Performs an auto-refresh cycle. 

4. Enters self-refresh mode and sets SDRAMO_STATUS[SRSTATUS]. 
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The SDRAM controller maintains the SDRAM in self-refresh mode, independent of any pending 
memory access requests, until SDRAMO_CFG[SRE] is cleared. Any attempt to read or write SDRAM 
memory during this time will stall the PLB.. 


Once SDRAMO_CFG[SRE] is cleared, the SDRAM controller performs the following: 
1. Exits self-refresh mode. 

2. Performs an auto-refresh cycle. 

3. Clears SDRAMO_STATUS[SRSTATUS]. 


The SDRAM controller is then ready to service any memory request. 


15.6 Power Management 


The SDRAM controller provides a sleep mode where all SDRAM controller clocking is disabled with 
the exception of the SDRAM refresh logic and the power management wake-up logic. When the 
SDRAN controller is in sleep mode SDRAM refresh continues to preserve the contents of the 
memory and maintain the refresh interval. 


15.6.1 Sleep Mode Entry 


Sleep mode is enabled by setting SDRAMO_CFG[PME] and CPMO_ER[SDRAM]. Once sleep mode 
is enabled and the SDRAM controller has been idle for the number of cycles programmed in 
SDRAMO_PMIT, the SDRAM controller goes to sleep. 


15.6.2 Power Management Idle Timer (SDRAMO_PMIT) 


The SDRAMO_PMIT register determines the number for SDRAM clock (MemCikOut1:0) cycles that 
the controller must be idle before it asserts a sleep request when power management is enabled 
(SDRAMO_CFG[PME]=1). At system reset, SDRAMO_PMIT[CNT] is set to zero. This corresponds to 
a sleep request after 32 idle cycles. 


Figure 15-17. Power Management Idle Timer (SDRAMO_PMIT) 


0:4 CNT | Count 
0-31 


pss [ [awesoornt 
Reserved 
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15.6.3 Sleep Mode Exit 


The power management wake-up logic monitors the PLB for SDRAM reads or writes from other 
masters. In addition, the wakeup logic also monitor the DCR bus for accesses to SDRAM 
configuration and status registers. If either a PLB or DCR operation targeting the SDRAM controller is 
detected the SDRAM controller wakes up. The wakeup process results in a two cycle additional 
latency to the pending operation. 
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Chapter 16. External Bus Controller 


The PPC405GP External Bus controller (EBC) provides direct attachment for most SRAM/Flash type 
memory and peripheral devices. The interface minimizes the amount of external glue logic needed to 
communicate with memory and peripheral devices. This reduces the embedded system device count, 
circuit board area, and cost. 


To eliminate off-chip address decoding, the EBC provides eight programmable chip selects that 
enable system designers to locate memory and peripherals within the PPC405GP memory map. Chip 
select, data bus, and associated control signal timings are programmable for both single and burst 
transfers. For peripherals with variable timing requirements the EBC supports device-paced transfers 
with optional bus-timeout. System design is further simplified through dynamic bus sizing which 
supports seamlessly attaching 8-, 16-, and 32-bit wide memories and peripherals. Whenever a size 
mismatch exists between a read or write operation and the externally attached device, the EBC 
automatically packs or unpacks data as appropriate. 


In addition to the peripheral and memory interface, the EBC includes an external bus master (EBM) 
interface. Using the EBM, external masters arbitrate and gain access to the peripheral interface. Once 
an external master owns the peripheral interface it can read and write all PLB- and OPB-addressable 
memory, with the exception of devices controlled by the EBC. Typical destinations for EBM 
transactions are PCI address space and SDRAM memory. For EBC-attached peripherals and 
memory, the external master is required to directly control the target. 


16.1 Interface Signals 


Figure 16-1 on page 16-2 illustrates the signal I/O between the EBC and the external peripheral bus. 
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External Bus 


Controller PerCik 


ExtReset 


PerAddr0:31 
PerData0:31 
PerPar0:3 


PerCSO 
PerCS1:7[GPIO10: 16] 
PerR/W 

PerWBE0:3 

PerOE 
PerWE[PCIINT] 
PerBLast 

PerReady 

PerErr 


PLB 


HoldReq 


HoldPri 
External Master 


Arbitration HoldAck 

and BusReq 
Controls Exifisg 
ExtAck 


Configuration 


DCR Bus ; 
Registers 


Figure 16-1. External Bus Controller Signals 


The usage along with the state of these signals during and after a reset is as follows: 


Table 16-1. EBC Signal Usage and State During/Following a Chip or System Reset 


PerClk See Note 1 Toggling | Peripheral bus clock. During an EBC transfer all EBC signal 
transitions and data sampling occurs synchronous to PerClk, 
| ExtReset | | ExtReset | 0 | 1 __| Peripheral reset for use by slaves and external bus masters. —_| Peripheral reset for use by | Peripheral reset for use by slaves and external bus masters. _| and external bus masters. 


PerAddr0:31 High-Z Peripheral address bus. PerAddr0 is the most significant bit. 
Address 


PerData0:31 High-Z High-Z Peripheral data bus. PerData0 is the most significant bit. 
PerPar0:3 High-Z High-Z Peripheral parity bus. The EBC implements odd parity. 


PerCS0:7 High-Z Chip selects. PerCS1:7 are multiplexed with GPIO10:16 and 


power up as actively driven chip selects. See “Pin Sharing” on 


page 9-3 for additional details. 
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Table 16-1. EBC Signal Usage and State During/Following a Chip or System Reset 


PerWBEO:3 nigh -Z a Write byte enables or read/write byte enables. 


PerWE High-Z High-Z Write ry, PerWE is low whenever any bit in PerWBE0:3 is low 

and PerR/W = 0. This signal is multiplexed with and defaults to 
PCIINT after a reset. PerWE is selected by setting 
CPCO_CR1[PCIPW]. 

PerBLast High-Z Burst Last. Active during non-burst operations and the last transfer 
of a burst access. 

pelenoy Input Input An input to allow external peripherals to perform device-paced 
transfers. 


PerErr | PerErr =| Input =| Input | [Peripheral dataerrorinput [Peripheral dataerrorinput error input. 


HoldReq Hold request, used by an external master to request ownership of | _ 
the peripheral bus. 

HoldPri Hold priority, used by an external master to indicate the priority in 
effect for an external master bus tenure. 

HoldAck High-Z Hold acknowledge, informs the external master that it has been 
granted ownership of the peripheral bus. 

BusReq Bus request, active when the EBC needs to regain control of the 
peripheral interface from an external master. 

ExtReq External request, used by an external master to indicate that it is 
prepared to transfer data. 

ExtAck High-Z 1 External acknowledge, used by the PPC405GP to indicate that an 
external master data transfer occurred. 


Note 1: During a chip or system reset PerClk begins clocking 64 SysClk cycles prior to the time when 
the ExtReset output switches from 0 to 1. 


16.1.1 Interfacing to Byte, Halfword and Word Devices 


Figure 16-2 on page 16-4 illustrates how to interface byte, halfword, and word devices to the 
peripheral data bus. When devices are connected in this way the EBC supports burst transfers and 
automatically converts read and write operations to the data width of the external device. As shown in 
Figure 16-2, halfword devices should not connect to PerAddr31. Similarly, a 32-bit device does not 
require either PerAddr30 or PerAddr31. Instead, the active byte lanes should be inferred from 
PerWBE0:3, the read/write byte enables. 


When a large number of byte and halfword devices are attached to the peripheral data bus, the 
capacitive loading on byte lane 0 (and byte lane 1, if many halfword devices are used) will be much 
larger than the loading on byte 3, possibly resulting in unacceptable timing performance on byte O or 
byte 1. 


If a bank register is configured as word-wide, then byte-wide devices may be attached to the bus in 
any byte lane (and accessed using byte loads and stores). Similarly, if a bank register is configured as 
word-wide, then halfword-wide devices may be attached to the bus in the byte O/byte 1 lane, or in the 
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byte 2/byte 3 lane, and accessed using halfword loads and stores. External logic may be required to 
develop additional control! signals if the data bus is utilized in this manner. 


PerAddr0:31 
PerCS0:7 = ; : f 
TF TF TF 
PerData0:7 
PerParO Byte 
Device 


PerWBE0|[PerBEO) 


PerData8:15 
PerPar1 
PerWBE1[PerBE1] 


PerData16:23 < 
PerPar2 
PerWBE2[PerBE2] 


PerData24:31 
PerPar3 
PerWBE3[PerBE3] 


Figure 16-2. Attachment of Devices of Various Widths to the Peripheral Data Bus 


16.1.2 Multiplexed I/Os 


Seven of the chip select outputs, PerCS1:7, are multiplexed with GPIOs, while PerWE is multiplexed 
with PCIINT. The multiplexing of these I/Os occurs outside of the EBC logic, see “Pin Sharing” on 
page 9-3 for additional details. As a result, software can still configure and attempt to use a peripheral 
memory bank whose output is set up as a GPIO. Doing so causes an EBC transaction without an 
active chip select and the results are therefore undefined. 


In the remainder of this chapter PerCS0:7 and PerWE are assumed to be configured as EBC outputs. 


16.1.3 Driver Enables 


As shown in Table 16-2, “Effect of Driver Enable Programming on EBC Signal States,” on page 16-5, 
the output enables for the peripheral address, data and most of the EBC control signals are 
configurable. For systems that do not use an external master or where the external master does not 
directly control devices on the peripheral bus, setting EBCO_CFG[CSTC]=1 eliminates the need for 
pull-up resistors on PerCS0:7. Pullups are also unnecessary on the remainder of the EBC contro! 
signals when EBCO_CFG[EBTC]=1. 


Both chip and system resets set EBCO_CFG[EBTC]=1 and EBCO_CFG[CSTC]=1. In most 
. applications, clearing EBCO_CFG[CSTC] is not recommended. If EBCO_CFG[EBTC]=0, EBC control 
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signals can transition from the active state to high-Z without first being driven inactive. To prevent this, 
all peripheral banks must be configured with at least one hold cycle, EBCO_BnAP[TH] > 0. 


Table 16-2. Effect of Driver Enable Programming on EBC Signal States 


ExtReset 
PerClk PerAddr0:31 
PerWE PerR/W 

HoldAck PerWBE0:3 

BusReq PerOE PerData0:31 
ExtAck PerBLast PerPar0:3 


Driven | EBCO_CFG[CSTC] High-Z High-Z 


Note 1: If the EBCO_CFG bit is set, the signal is driven to the appropriate state during the indicated 
EBC operation. Otherwise, the I/O is High-Z. 


16.2 Non-Burst Peripheral Bus Transactions 


The timing of the PerCSn, PerOE, and PerWBE0O:3 signals is programmable via the Peripheral Bank 
Access Parameter (EBCO_BnAP) registers. For non-burst transfers, the access parameter registers 
control the peripheral bus timing as follows: 


e PerCSn becomes active 0-3 PerClk cycles (EBCO_BnAP[CSN)) after the address is driven. 
¢ PerOE is driven low 0-3 PerClk cycles (EBCO_BnAP[OEN)) after PerCSn is active. 


e PerBLast is active throughout the entire transfer and is driven high during the programmed hold 
time (EBCO_BnAP[TH)). 


¢ PerWBEO:3 can be either write byte enables or read and write enables. 
lf EBCO_BnAP[BEM]=0, PerWBE0:3 are write byte enables and: 


~— PerWBE0:3 goes active 0-3 (EBCO_BnAP[WBN)) PerClk cycles after PerCSn becomes active. 


— PerWBE0:3 becomes inactive 0-3 (EBCO_BnAP[WBF)) PerClk cycles before PerCSn becomes 
inactive. 


If EBCO_BnAP[BEM]=1, PerWBE0:3 are read/write byte enables and have timing identical to the 
peripheral address bus. In this case the EBCO_BnAP[WBN] and EBCO_BnAP[WBF] parameters 
are ignored. 


e 1-256 PerClk cycles (EBCO_BnAP[TWT] + 1) after the address became valid: 
— If EBCO_CFG[CSTC]=1 or EBCO_BnAP[TH]>0, PerCSn is driven high. 


— If EBCO_CFG[CSTC]=0 and EBCO_BnAP[TH]=0, PerCSn transitions directly from logic 0 to the 
high-impedance state. 


¢ The parameters TWT, CSN, OEN, WBN, and WBF in EBCO_BnAP are not independent. For non- 
burst configured banks it is required that TWT = CSN + MAX(OEN,WBN) + WBF. 
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¢ The hold time, EBCO_BnAP[TH], is programmable from 0 to 7 PerClk cycles. During the hold time 
the peripheral address bus remains driven with the last address and all control signals are actively 
driven high. If the operation was a write, the peripheral data bus continues driving the last data 
value. 


¢ There is no guarantee of dead cycles between transfers on the peripheral interface. If there are 
_ back-to-back transfers to the same memory bank and the number of hold cycles is programmed to 
zero (EBCO_BnAP[TH]=0) and EBCO_BnAP[CSN)}=0, then: 


— PerCSn may not go inactive between the back-to-back transfers. 
— If EBCO_BnAP[OEN]=0, PerOE may not become inactive between the two transfers. 


— If EBCO_BnAP[WBN]=0 and EBCO_BnAP[WBF]=0, PerWBE0:3 may not go inactive between 
the back-to-back transfers. 


16.2.1 Single Read Transfer 


Figure 16-3 shows the peripheral interface timing for a single read transfer from a non-burst enabled 
(EBCO_BnAP[BME]=0) bank. The transaction begins with the address being driven. Since this is a 
single transfer, PerBLast is also driven active along with the address. If byte enable mode is enabled 
for the bank (EBCO_BnAP[BEM]=1) the byte enables are also output concurrently on PerWBE0:3. 
PerCSn then becomes active EBCO_BnAP[CSN] cycles after the address, while PerOE goes low 
EBCO_BnAP[OEN] cycles after PerCSn. The EBC then waits until EBCO_BnAP[TWT]+1 cycles have 
elapsed since the start of the transaction and then reads the data bus and the peripheral error input, 
PerErr. If parity checking is enabled (EBCO_BnAP[PAR]=1) the parity is also read at this time. The 
EBC then drives PerCSn, PerOE and PerBLast high and waits EBCO_BnAP[TH] cycles. 


2 


cyte CENCE a 
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PerAddr0:31 TY Address —__] 


PerR/W eT 

PerOE = 

PerBLast ~ 
PerWBEO:3 

- BEM=0 ne eae 
PerWE ee 


PetWBEO:S Ti 
BEM=1 eee ser: 
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PerData0:31 — - - 
PerPar0:3 — 

. PerErr 


Figure 16-3. Single Read Transfer 
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16.2.2 Single Write Transfer 


Figure 16-4 shows the peripheral interface timing for a single write transfer to a non-burst enabled 
(EBCO_BnAP[BME]=0) bank. The transaction begins with the address being driven. Since this is a 
single transfer, PerBLast is also driven active along with the address. PerCSn then becomes active 
EBCO_BnAP[CSN] cycles after the address. At this point the signalling sequence depends on 
whether or not byte enable mode is enabled for the bank. 


¢ If EBCO_BnAP[BEM]=0, byte enable mode is disabled and the PerWBE0:3 are write byte enables. 
The appropriate write byte enables go low EBCO_BnAP[WBN] cycles after PerCSn. The EBC then 
waits until (EBCO_BnAP[TWT] - EBCO_BnAP[WBF] + 1) cycles have elapsed since the start of the 
transaction, then drives all the PerWBE0:3 inactive. 


. © If EBCO_BnAP[BEM]=1, the PerWBE0:3 lines are byte enables and have the same timing as the 
peripheral address bus. 


After EBCO_BnAP[TWT+1] cycles elapse from the start of transfer, PerCSn and PerBLast are driven 
high. The EBC then waits EBCO_BnAP[TH] cycles before allowing any pending transfers to occur. 
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PerWBEOS ° 
BEM=0 
Perwe ” 


PetWBEO:3 
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PerErr - 
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Figure 16-4. Single Write Transfer 
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16.3 Burst Transactions 


Bursting is controlled on a per-bank basis by the Burst Mode Enable bit in the EBCO_BnAP registers. 
When enabled (EBCO_BnAP[BME]=1) this mode activates bursting for all cache line fills and flushes, 
PLB burst transfers to the EBC, and all packing and unpacking operations. When bursting is enabled: 


PerCSn becomes active 0-3 (EBCO_BnAP[CSN)]) PerClk cycles after the address becomes valid. 
PerCSn is no longer actively driven: 


— 1-32 (EBCO_BnAP[FWT]+1) PerCik cycles after the address becomes valid when a single 
transfer occurs to a burst-enabled bank. 


— 1-8 (EBCO_BnAP[BWT]+1) PerClk cycles after the last address becomes valid during a burst: 
- If EBCO_CFG[CSTC]=1 or EBCO_BnAP[TH]>0, PerCSn is driven high. 


- If EBCO_CFG[CSTC]=0 and EBCO_BnAP[TH]=0, PerCSn transitions directly from logic 0 to 
the high-impedance state. 


During read operations PerOE is driven low 0-3 (EBCO_BnAP[OEN]) PerClk cycles after PerCSn is 
active. PerOE goes inactive when PerCSn goes inactive. 


For bursts, the EBC drives a new address (EBCO_BnAP[FWT]+1) + N*(EBCO_BnAP[BWT]+1) 
cycles after the start of the transaction, where N = 0, 1, 2, ... 


Addresses during a burst may “wrap.” For example, cache line fills are processed critical word first. 
During write operations, the write data is driven concurrent with each address. 

PerWBE0:3 can be either write byte enables or read and write enables. 

lf EBCO_BnAP[BEM]=0, PerWBE0:3 are write byte enables and: 


— For the first transfer of a burst, or a single transfer to a burst enabled bank, the appropriate write 
byte enables go low 0-3 (EBCO_BnAP[WBN)]) cycles after PerCSn becomes active. The EBC 
then waits until EBCO_BnAP[FWT] - EBCO_BnAP[WBF] + 1 cycles have elapsed since the start 
of the transaction and drives PerWBE0:3 inactive. 


~ The remaining transfers of the burst are similar, except that PerWBE0:3 becomes active 
EBCO_BnAP[WBN] cycles after each new address is driven on the interface. The PerWBE0:3 
remain low for (EBCO_BnAP[BWT] + 1) - EBCO_BnAP[WBN] - EBCO_BnAP[WBF] cycles. 


lf EBCO_BnAP[BEM]=1, PerWBE0:3 are byte enables that have timing identical to the peripheral 
address bus. In this case the EBCO_BnAP[WBN] and EBCO_BnAP[WBF] parameters are ignored. 


PerBLast is active throughout the entire last (or only) transfer of a burst operation and is 
deactivated during the programmed hold time (EBCO_BnAP[TH]). 


Access bank parameters CSN and OEN apply to the first (or only) transfer of a burst, while WBN 
and WBF apply to all transfers. It is required that FWT = CSN + MAX(OEN,WBN) + WBF and 
BWT >= WBN+WEF. 


Hold time (EBCO_BnAP[TH]) is programmable from 0 to 7 cycles. During the hold time, the 
peripheral address bus remains driven and all control signals are driven inactive. If the operation 
was a write, the peripheral data bus continues driving the write data. 


There is no guarantee of dead cycles between transfers on the peripheral interface. If there are 
back-to-back transfers to the same memory bank and the number of hold cycles is programmed to 
zero (EBCO_BnAP[TH]=0) and EBCO_BnAP[CSN)]=0, then: 
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— PerCSn may not go inactive between the back-to-back transfers. 
— If EBCO_BnAP[OEN]=0, PerOE may not become inactive between the two transfers. 


— If EBCO_BnAP[WBN]=0 and EBCO_BnAP[WBF]=0, PerWBE0:3 may not go inactive between 
the back-to-back transfers. 


16.3.1 Burst Read Transfer 


Figure 16-5 shows the peripheral interface timing for a burst read transfer from a burst enabled 
(EBCO_BnAP[BME]=1) bank. The transaction begins with the address being driven. If byte enable 
mode is enabled for the bank (EBCO_BnAP[BEM]=1) the byte enables are also output concurrently 
on PerWBE0:3. PerCSn then becomes active EBCO_BnAP[CSN] cycles after the address, while 
PerOE goes low EBCO_BnAP[OEN] cycles after PerCSn. The EBC then waits until 
EBCO_BnAP[FWT]+1 cycles have elapsed since the start of the transaction and then reads the data 
bus and the peripheral error input, PerErr. If parity checking is enabled (EBCO_BnAP[PEN]=1) the 
parity is also read at this same time. 


The next address of the burst is then driven and after EBCO_BnAP[BWT]+1 cycles the EBC performs 
the next read. The remaining items in the burst are read in the same manner, except that PerBLast is 
active during the last data element. The EBC then drives PerCSn, PerOE and PerBLast high and 
waits EBCO_BnAP[TH] cycles before allowing any pending transfers to occur. 
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Figure 16-5. Burst Read Transfer 
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16.3.2 Burst Write Transfer 


Figure 16-6 shows the peripheral interface timing for a burst write transfer to burst enabled 


(EBCO_BnAP[BME]=1) bank. The transaction begins with the address being driven. At this point the 


signalling sequence depends on whether byte enable mode is enabled for the bank. 


¢ If EBCO_BnAP[BEM)=0, byte enable mode is disabled and PerWBE0:3 are write byte enables. In 
this case, the appropriate write byte enables go low EBCO_BnAP[WBN] cycles after PerCSn. The | 
EBC then waits until (EBCO_BnAP[FWT] +1) - EBCO_BnAP[WBF] cycles have elapsed since the 
start of the transaction and drives PerWBE0:3 inactive. EBCO_BnAP[WBF] cycles are then allowed 
to elapse after which the address and data are output for the second element in the burst. As 


shown in Figure 16-6, the EBC transfers the subsequent data items in a similar manner. 


e If EBCO_BnAP[BEM]=1, the PerWBE0:3 lines are byte enables and have the same timing as the 
peripheral address bus. In this configuration external logic may be necessary to latch write data at 


the appropriate times. 


PerBLast goes low at the beginning of the last transfer to indicate that the burst is ending. The EBC 
then drives PerCSn and PerBLast high and waits EBCO_BnAP[TH] cycles before allowing any 


pending transfers to occur. 
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Figure 16-6. Burst Write Transfer 
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16.4 Device-Paced Transfers 


For device-paced transfers, the EBC provides two distinct modes: Sample On Ready enabled and 
Sample On Ready disabled. The selection of these modes is controlled on a per-bank basis by 
EBCO_BnAP[SOR]. When Sample On Ready is enabled (EBCO_BnAP[SOR] = 1) data is transferred 
on the PerClk rising edge where PerReady is sampled active. When Sampling On Ready is disabled 
(EBCO_BnAP[SOR] = 0), PerReady sampled active causes the data transfer to occur in the next 
cycle, which results in an additional cycle of wait time. 


The ready signal (PerReady) is an input which allows the insertion of externally generated (device- 
paced) wait states. PerReady is monitored only when EBCO_BnAP[RE]=1. 


e For burst disabled banks (EBCO_BnAP[BME] = 0) sampling of the PerReady input starts 
EBCO_BnAP[TWT] cycles after the beginning of the transfer. Wait states are inserted and sampling 
continues once per cycle until either PerReady is high when sampled or a timeout occurs. 


¢ For burst enabled banks (EBCO_BnAP[BME] = 1) sampling of the PerReady input starts 
EBCO_BnAP[FWT] PerClk cycles after the beginning of the first transfer of a burst, and 
EBCO_BnAP[BWT] cycles after the beginning of subsequent transfers of the burst. Sampling 
continues once per cycle until either PerReady is sampled high or a timeout occurs. 


e When EBCO_BnAP[SOR] = 1 data transfer occurs in the same cycle where PerReady is sampled 
active. In contrast, if EBCO_BnAP[SOR]=0 the data transfer occurs in the next cycle. 


e When EBCO_BnAP[SOR] = 1, if the hold time is set to zero, EBCO_BnAP[TH] = 0, the programmed 
hold time is ignored and the EBC performs the transaction with one hold cycle. 


¢ When EBCO_BnAP[RE] = 1, the Write Byte Enable Off parameter must be programmed to zero, 
EBCO_BnAP[WBF] = 0. 


The EBC may be programmed to wait only a limited time for PerReady to become active, or it may be 
programmed for unlimited wait. If EBCO_CFG[PTD] = 1, timeouts are disabled and the EBC waits 
indefinitely for an active PerReady. 


lf EBCO_CFG[PTD] = 0, device-paced timeouts are enabled and the EBC only waits for the number of 
PerClk cycles programmed in EBCO_CFG[RTC]. The timeout counter is reset whenever the 
peripheral address changes. In this manner each data element within a device-paced burst 
transaction is treated separately for the purposes of determining whether a timeout error occurs. If 
PerReady does not become active before the timeout counter reaches the value programmed into 
EBCO_CFG[RTC], the transfer is aborted and an error is signalled. See “Error Reporting” on 

page 16-29 for details on how timeout errors are logged. 
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16.4.1 Device-Paced Single Read Transfer 


Figure 16-7 shows the peripheral interface timing for a device-paced single read transfer from a burst 
disabled (EBCO_BnAP[BME]=0) bank. The transaction begins with the address being driven. Since 
this is a single transfer, PerBLast is also driven active along with the address. lf byte enable mode is 
enabled for the bank (EBCO_BnAP[BEM]=1) the byte enables are also output concurrently on 
PerWBE0:3. PerCSn then becomes active EBCO_BnAP[CSN] cycles after the address, while PerOE 
goes low EBCO_BnAP[OEN] cycles after PerCSn. 


The EBC then waits unti] EBCO_BnAP[TWT]+1 cycles have elapsed since the start of the transaction 
‘ and then begins sampling PerReady. If device-paced timeouts are disabled (EBCO_CFG[PTD]=0) the 
EBC waits indefinitely for PerReady to become active. Otherwise, the EBC waits only 
EBCO_CFG[RTC] cycles from the start of the transaction until logging a timeout error. 


Once PerReady is sampled active if Sample On Ready is disabled (EBCO_BnAP[SOR]=0) the EBC 
waits one more cycle. The EBC then samples the data bus and the peripheral error input, PerErr. If 
parity checking is enabled (EBCO_BnAP[PEN]=1) the parity is also read at this time. The EBC then 
drives PerCSn, PerOE and PerBLast high and waits EBCO_BnAP[TH] cycles before allowing any 
pending EBC transfers to occur. 


Cycle ies Hola aus am 
PerClk mei & f 


PerAddr0:31 


isn} )”S”SC*«ST 
PerCSn _ 
PerRIW Ton 
PerOE z = 
PerBLast cm 


PetWBEO:3 TI 
BEM=1 es 
PerWE __. 


Soro [ PerReady 2 


sor=1[ PerReady Too a 
PerData0:31 -—— 
PerPar0:3 = 


PeEr 2 2 


«Figure 16-7. Device-Paced Single Read Transfer 
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16.4.2 Device-Paced Single Write Transfer 


Figure 16-8 shows the peripheral interface timing for a device-paced single write transfer from a burst 
enabled (EBCO_BnAP[BME]=1) bank. The transaction begins with the address being driven. Since 
this is a single transfer, PerBLast is also driven active along with the address. At this point the 
signalling sequence depends on whether byte enable mode is enabled for the particular bank. 


¢ |f EBCO_BnAP[BEM]=0, byte enable mode is disabled and the PerWBE0:3 are write byte enables. 
The appropriate write byte enables go low EBCO_BnAP[WBN] cycles after PerCSn went low. 
PerWBE0:3 return high on the same PerClk edge that the write data is transferred (see below). 


¢ lf EBCO_BnAP[BEM]=1, the PerWBEO0:3 lines are byte enables and have the same timing as the 
peripheral address bus. 


The EBC then waits until EBCO_BnAP[TWT]+1 cycles have elapsed since the start of the transaction 
and then begins sample PerReady. If device-paced timeouts are disabled (EBCO_CFG[PTD]=0) the 
EBC waits indefinitely for PerReady to become active. Otherwise, the EBC waits only 
EBCO_CFG[RTC] cycles from the start of the transaction until logging a timeout error. 


If PerReady is sampled active and Sample On Ready is disabled (EBCO_BnAP[SOR]=0) the EBC 
waits one more cycle. At this point, the write transfer occurs and the EBC reads the peripheral error 
input, PerErr. The EBC then drives PerCSn, PerOE and PerBLast high and waits EBCO_BnAP[TH] 
cycles. 
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Figure 16-8. Device-Paced Single Write Transfer 
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16.4.3 Device-Paced Burst Read Transfer 


Figure 16-9 shows the peripheral interface timing for a device-paced burst read transfer from a burst 
enabled (EBCO_BnAP[BME]=1) bank. The transaction begins with the address being driven. If byte 
enable mode is enabled for the bank (EBCO_BnAP[BEM]=1) the byte enables are also output 
concurrently on PerWBEO:3. PerCSn then becomes active EBCO_BnAP[CSN] cycles after the 
address, while PerOE goes low EBCO_BnAP[OEN] cycles after PerCSn. The EBC then waits until 
EBCO_BnAP[FWT]+1 cycles have elapsed since the start of the transaction and begins sampling 
PerReady. 


If device-paced timeouts are disabled (EBCO_CFG[PTD]=0) the EBC waits indefinitely for PerReady to 
become active. Otherwise, the EBC waits only EBCO_CFG[RTC] cycles from the start of the transaction 
until logging a timeout error. 


If PerReady is sampled active and Sample On Ready is disabled (EBCO_BnAP[SOR]=0) the EBC 
waits one more cycle before sampling read data. The EBC then reads the data bus and the peripheral 
error input, PerErr. If parity checking is enabled (EBCO_BnAP[PEN]=1) the parity is also read. 


The next address of the burst is then driven and after EBCO_BnAP[BWT]+1 cycles the EBC waits for 
PerReady as described above. The remaining items in the burst are read in this same manner, except 
that PerBLast is active during the last data element. The EBC then drives PerCSn, PerOE and 
PerBLast high and waits EBCO_BnAP[TH] cycles before allowing any pending transfers to occur. 
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Figure 16-9. Device-Paced Burst Read Transfer 
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16.4.4 Device-Paced Burst Write Transfer 


Figure 16-10 shows the peripheral interface timing for a device-paced burst write transfer to a burst 
enabled (EBCO_BnAP[BME]=1) bank. The transaction begins with the address being driven. PerCSn 
then becomes active EBCO_BnAP[CSN] cycles after the address. At this point the signalling 
sequence depends on whether or not byte enable mode is enabled for the bank. 


¢ If byte enable mode is disabled (EBCO_BnAP[BEM]=0) PerWBE0:3 are write byte enables. In this 
case the appropriate write byte enables go low EBCO_BnAP[WBN] cycles after PerCSn becomes 
active for the first element in a burst and EBCO_BnAP[WBN] cycles after each new address for the 
remainder of the burst. If EBCO_BnAP[WBN]<0, PerWBE0:3 is driven inactive on the same 
PerClk edge that write data is transferred (see below). Otherwise, PerWBE0:3 remains low for all 
data elements in the burst. . 


¢ lf EBCO_BnAP[BEM]=1, PerWBE0:3 are byte enables and have the same timing as PerAddr0:31. 


The EBC then waits until EBCO_BnAP[FWT]+1 cycles have elapsed since the start of the transaction 
and begins sampling PerReady. If device-paced timeouts are disabled (EBCO_CFG[PTD]=0) the EBC 
waits indefinitely for PerReady. Otherwise, the EBC waits only EBCO_CFG[RTC] cycles from the start of 
the transaction until logging a timeout error. 


If PerReady is sampled active and Sample On Ready is disabled (EBCO_BnAP[SOR]=0) the EBC 
waits one more cycle. At this point the write transfer occurs and the EBC reads the peripheral error 
input, PerErr. 


The next address of the burst is then driven and after EBCO_BnAP[BWT]+1 cycles the EBC waits for 
PerReady as described above. The remaining items in the burst are transferred in this same manner, 
except that PerBLast is active for the last data element. The EBC then drives PerCSn, PerOE and 
PerBLast high and waits EBCO_BnAP[TH] cycles before allowing any pending transfers to occur. 
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‘Figure 16-10. Device-Paced Burst Write Transfer 
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16.5 External Bus Master Interface 


The EBC includes an External Bus Master (EBM) interface supporting a shared bus protocol which 
allows an EBM to gain control of the peripheral bus. Once an external master has been granted 
access to the peripheral interface it can read and write all PLB- and OPB-addressable memory, with 
the exception of devices controlled by the EBC. Typical destinations for EBM transactions are PCI 
address space and SDRAM memory. For EBC-attached peripherals and memory, the external master 
is required to directly control the target. 


Figure 16-11 shows a sample interconnection of the EBC, one SRAM bank, and one external bus 
master. While only one SRAM bank is shown, the bus master could access all eight of the SRAM 
banks. Also, with the appropriate arbitration logic, multiple bus masters may be used in a system. 
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Figure 16-11. Sample External Bus Master System 


The EBM interface includes both arbitration and data transfer functions. The arbiter grants the 
peripheral bus to either the EBC or an external master, while the datapath logic implements an 
external master to PLB bridge function. This bridge function translates the EBM interface protocol to 
that required by the on-chip PLB bus. 


16.5.1 Arbitration 


To gain control of the peripheral bus, the external bus master places an active level on the HoldReq 
input and drives the HoldPri signal to the desired value (see Figure 16-12 on page 16-20 for an 
illustrative waveform). The HoldPri input selects the priority of the external master’s transactions 
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relative to other EBC operations. Internal to the PPC405GP all reads and writes that target the EBC 
are assigned the priority 0b10. 


If HoldPri=0 the external master priority is set to EBCO_CFG[EMPL], whereas HoldPri=1 sets the 
priority to EBCO_CFG[EMPH]. Table 16-3 details the only unique ways of programming the external 
master priority fields in EBCO_CFG, along with the arbiter’s response. 


Table 16-3. External Master Arbitration. 


EMPL HoldAck Becomes Active BusReq Goes Active 
Ob0O | Obi1 fis If no EBC transfers are active or pending. 
eo | 1 | After any active EBC operation completes. 


When an external bus master requests the bus by driving HoldAck=1, the EBC finishes any transfer in 
progress (except for bursts) before arbitrating between any pending PLB request and the external 
master request. If the external master presents a higher priority request during a PLB burst, the burst 
is terminated. Note that processor cache reads and writes are PLB line operations, not PLB bursts, 
and are never interrupted. 


As detailed in Table 16-3, the arbitration logic drives HoldAck active either when the current EBC 
transaction completes or when there are no EBC transfers pending. Once the external master has 
been granted the bus, it may either directly control devices on the peripheral bus or read and write 
PLB- and OPB-addressable memory. If the EBC detects a pending PLB request when the external 
master owns the peripheral bus (HoldAck=1), BusReq may be asserted to signal the external master 
that the PPC405GP wants to regain ownership of the peripheral bus. Table 16-3 lists the cases where 
a PLB request causes BusRegq to go active. To ensure fairness and optimize bus utilization, an 
external master that receives an active BusReq should complete its current transaction and then 
relinquish ownership of the peripheral bus by driving HoldReq inactive. This is important since the 
EBC cannot reclaim ownership of the external bus until the external master negates HoldReq. 


Table 16-4, “Signal States During Hold Acknowledge (HoldAck=1),” on page 16-18 details the usage 
of the EBC I/Os when an external master has been granted ownership of the peripheral bus. The 
usage statements in this table for signals other than HoldPri, HoldReq, HoldAck and BusReq do not 
apply if an external master directly controls a device on the peripheral bus. 


Table 16-4. Signal States During Hold Acknowledge (HoldAck=1) 
[Stanarwane [Site [eae 


a 
change state when HoldReq=1. 
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Table 16-4. Signal States During Hold Acknowledge (HoldAck=1) 


[SienaiWame [Sie [ee 
[FerWBEOS | ~Topat | Selects he requested bye for ead andes 
[Fatast | —Toput | Aave drng single wasters andthe lastwenserofaburst | 
FROE [High [Unwed 


16.5.2 Transaction Overview 


The EBM interface supports direct attachment of 8-, 16-, and 32-bit masters. By programming the 
width of the external master into EBCO_CFG[EMS] the interface accepts write data and provides read 
data at the appropriate width for the master. The EBM interface includes a 32-byte data buffer, used 
for both read and write operations between the EBM and PLB- and OPB-mapped memory locations. 
While write operations only use the buffer during bursts, all reads prefetch one doubleword and burst 
reads prefetch EBCO_CFG[BPR] doublewords from the source memory into the buffer. This 
prefetched data remains in the buffer until either a write operation is performed or a read is requested 
to a different 32-byte block of memory. 


To provide the best possible performance, the EBM interface supports both single and burst 
transactions. Single read transfers result in the EBM reading and buffering a 64-bit doubleword from 
the requested memory address. The requested read data is then serviced from within this 
doubleword. If the next operation on the EBM interface is a read and targets this same doubleword, it 
is serviced directly from the buffer. Burst reads are similar, except that the EBM prefetches four 
doublewords beginning with the requested word. 


Single write transfers result in a separate PLB transaction for each data item. To improve 
performance, burst writes are gathered in the 32-byte buffer and forwarded in a single PLB 
transaction to the target memory. 


16.5.3 Single Read and Single Write Transfers 


Figure 16-12 illustrates external master bus arbitration along with a single read and signal write 
transfer. An external master requests ownership of the peripheral bus by driving HoldReq active along 
with the desired priority on HoldPri. Observe that HoldPri must be held at constant value throughout 
the entire external master tenure. After two or more PerClk cycles the arbiter will grant the peripheral 
bus to the external master. The delay from when the external master asserts HoldReq to when 
HoldAck becomes active is variable and depends on any EBC transaction that may be in progress or 
pending, the level on HoldPri, and the programming in EBCO_CFG[EMPL] and EBCO_CFG[EMPH#]. 


Once the external master is granted the peripheral bus (HoldAck=1), it may either directly control a 
device on the EBC or issue read and write transactions to the external master interface. This 
waveform and the ones that follow apply only to the later case. Additionally, cycles shown with breaks 
in the clock may not be present or may extend for multiple cycles. 
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To perform a single read operation the external master must: 
e Place the desired address on PerAddr0:31. 

* Indicate the requested data byte(s) on PerWBE0:3. 

¢ Drive PerR/W high. 

e Assert PerBLast to mark this as a single transfer. 


e Request the transfer by driving and holding ExtReq low. 
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i i i i i 


PerWBE0:3 i 
PerR/W | 
PerBLast E aay: 


Perbata0:31 Tn 


Figure 16-12. External Master Arbitration, Single Read and Single Write 


The EBM interface then converts this read request into a PLB transaction and reads the target 
memory location. ExtAck then goes low when read data is available on PerData. Note that the 
external master must not remove ExtReq until the cycle after ExtAck becomes active. In addition, 
ExtReq must be high for at least one cycle between all external master transactions. 


Write transfers are similar to reads except that the write data must be provided along with the address 
and PerR/W is low to indicate a write. As with reads, ExtReq must be held until the cycle after ExtAck 
is received. 


16.5.4 Burst Read Transfer 


Burst reads are preferred when accessing sequential addresses as they provide much better 
performance. Figure 16-13 illustrates an external master burst read transaction. A burst read differs 
from a single read in that PerBLast is held inactive for all but the last transfer of the burst. In addition, 
the EBM only requires the address of the first burst element. Following each ExtAck the EBM uses 
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the size of the master configured in EBCO_CFG[EMS] to increment its internal address counter as 
appropriate. 
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Figure 16-13. External Master Burst Read 


16.5.5 Burst Write Transfer 


Burst writes are preferred when accessing sequential addresses as they provide much better 
performance. Figure 16-14 illustrates an external master burst write transaction. A burst write differs 
from a single write in that PerBLast is held inactive for all but the last transfer of the burst. In addition, 
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the EBM only requires the address of the first burst element. Following each ExtAck the EBM uses 
the size of the master in EBCO_CFG[EMS] to increment its internal address counter as appropriate. 
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Figure 16-14. External Master Burst Write 


16.5.6 External Master Error Interrupts 


The EBM can generate an interrupt if a PLB error is encountered while read or writing data. As 
example, an SDRAM uncorrectable ECC error will cause and EBM interrupt. Please refer to the UIC 
Chapter for additional information regarding interrupts. 
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16.6 EBC Registers 


All EBC configuration and status registers are accessed using the PowerPC mtder and mfder 
instructions. Access to these registers is performed using an indirect addressing method through the 
EBCO_CFGADDR and EBCO_CFGDATA registers. 


Table 16-5. EBC DCR Addresses 


EBCO_CFGADDR 0x012 External Bus Controller Address Register 
EBCO_CFGDATA 0x013 External Bus Controller Data Register 


Table 16-6 lists the indirectly accessed EBC configuration and status registers. 


Table 16-6. External Bus Configuration and Status Registers 


1625 
162 
fEBCO_BEAR | __0x20___| _R__| Peripheral Bus Error Address Register| 1629 
reecoors «oes [AW [EBC Configuration Register _—_—_—=*dt 1628. 


To access one of these registers, software must first write the address offset into the 
EBCO_CFGADDR register. The target register can then be read or written through the 
EBCO_CFGDATA DCR address. The following PowerPC code illustrates this procedure by writing the 
EBCO_BOCR register and then reading back the written value. 


o 


© 


[o) 


Nh 


[e) 


li r3,EBCO_BOCR ! address offset 

lis r4,<config upper> ! upper 16-bits of configuration data 
ori r4,r4,<config lower> ! lower 16-bits of configuration data 
mtdcer EBCO_CFGADDR, r3 ! set offset addr 

mtder EBCO_CFGDATA, r4 ! write config data 

mfdcr r5, EBCO_CFGDATA ! read back config data 


16.6.1 EBC Configuration Register (EBCO_CFG) 


The contents of EBCO_CFG are accessed indirectly through the EBCO_CFGADDR and 
EBCO_CFGDATA registers using the mfder and mtder instructions. 
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Figure 16-15. EBC Configuration Register (EBCO_CFG) 


External Bus Three-State Control 

0 Address, data and control signals are 
high-Z between EBC transfers. 

1 Between EBC transfers the peripheral data 
bus, address bus and control signals are 
driven. 


Device-Paced Time-out Disable 
0 Enabled time-outs 
1 Disable time-outs 


Ready Timeout Count 
000 16 PerClk cycles 
001 32 PerClk cycles 
010 64 PerClk cycles 
011 128 PerClk cycles 
100 256 PerClk cycles 
101 512 PerClk cycles 
110 1024 PerClk cycles 
111 2048 PerClk cycles 


External Master Priority Low 
00 Low 

01 Medium low 

10 Medium high 

11 High 


External Master Priority High 
00 Low 

01 Medium low 

10 Medium high 

11 High 


Chip Select Three-state Control 

0 PerCS0:7 are high-Z between EBC 
transfers and when an external master is 
active (HoldAck=1) 

1 PerCS0:7 are always driven. 


Burst Prefetch 

00 Prefetch 1 doubleword 
01 Prefetch 2 doublewords 
10 Prefetch 4 doublewords 
11 Reserved 
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Default after reset is EBTC=1. See “Effect of 
Driver Enable Programming on EBC Signal 
States” on page 16-5. 


lf PTD=1, the EBC waits indefinitely for 
assertion of PerReady during device-paced 
accesses. 


When PTD=0, the number of cycles from 
PerAddr0:31 changing until a time-out error 
occurs. 


The PLB priority for external master initiated 
transfers when the external master hold 
priority input is low (HoldPri=0). 


The PLB priority for external master initiated 
transfers when the external master hold 
priority input is high (HoldPri=1). 


Default after reset is CSTC=1. See “Effect of 
Driver Enable Programming on EBC Signal 
States” on page 16-5. 


Controls the amount of data prefetching __ 
when the EBC is servicing a PLB burst read. 
For most applications set this field to Ob00. 


12:13] EMS | External Master Size Width of the attached external master. 
00 8-bit 
01 16-bit 
10 32-bit 
11 No external master attached 


Power Management Enable 
0 Disabled 
1 Enabled 


Power Management Timer The EBC makes a sleep request to the Clock 

0-31 and Power Management unit when PME=1 
and the EBC has been idle for 32*PMT 
PerClk cycles. 


EN 


16.6.2 Peripheral Bank Configuration Registers (EBCO_BnCR) 


These registers must be configured to enable memory in each respective bank. Boot ROM must be 
attached to bank 0 if installed. 


If a boot ROM is present, the bank 0 starting address register is loaded with a value of OxFFE, and 
the bank 0 size register is loaded with a value of O0b001 (2MB) immediately following SysReset 
inactive. 


BAS BS BU BW 


0 Te Tat 617 Tel ei 


Figure 16-16. Peripheral Bank Configuration Registers (EBCO_BnCR) 


BAS | Base Address Select Specifies the bank starting address, which 
must be a multiple of the bank size. 


12:14 BS Bank Size 

000 1 MB bank 
001 2 MB bank 
010 4 MB bank 
011 8 MB bank 
100 16 MB bank 
101 32 MB bank 
110 64 MB bank 
111 128 MB bank 


15:16 Bank Usage Specifies the type of accesses allowed for 
00 Disabled ; the bank. A protect error occurs if a write is 
01 Read-only attempted to a read-only bank or a read 
10 Write-only from a write-only bank. . 
11 Read/Write 
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17:18 BW | Bus Width 
00 8-bit bus 
01 16-bit bus 
10 32-bit bus 
11 Reserved 


rear fReees 


¢ BAS (Base Address Select, bits 0:11) — Sets the base address for a peripheral device. The bank 
starting address must be a multiple of the bank size programmed in the BS field. The BAS field is 
compared to bits 0:11 of the address. If the address is within the range of a BAS field, the 
associated bank is enabled for the transaction. 


Multiple bank registers may be inadvertently programmed with the same base address or as 
overlapping banks. An attempt to use such overlapping banks is recorded in EBCO_BESRO or 
EBCO_BESR?1 as a configuration error and no external access occurs. This error may result in a 
machine check exception if the requesting master is the CPU. If the error occurred during a DMA 
access, the DMA may signal an interrupt to the PPC405GP through the UIC. 


¢ BS (Bank Size, bits 12:14) — Sets the number of bytes which the bank may access, beginning with 
the base address set in the BAS field. 


e BU (Bank Usage, bits 15:16) — Protects banks of physical devices from read or write accesses. 


When a write access is attempted to an address within the range of the BAS field, and the bank is 
designated as read-only, a protection error occurs. Also, when a read access is attempted to an 
address within the range of the BAS field, and the bank is designated as write-only, a protection 
error occurs. The address of the attempted access is logged in EBCO_BEAR and type of error is 
logged in either EBCO_BESRO or EBCO_BESR1. . 


¢ BW (Bus Width, bits 17:18) — Controls the width of region accesses. If the BW field is Ob00, the 
region is configured for an 8-bit data bus; 0b01 indicates a 16-bit data bus and 0b10 indicates a 32- 
bit data bus. If devices are attached to the data bus as shown in Figure 16.1.1 on page 16-3, the 
EBC automatically packs read data and unpacks write data when a data transfer size mismatch 
exists. 


16.6.3 Peripheral Bank Access Parameters (EBCO_BnAP) 


BME TWT CSN WBN TH SOR PEN 


Burst Mode Enable 
0 Bursting is disabled 
1 Bursting is enabled 


Transfer Wait Wait states on all transfers when BME=0. 
0-255 PerClk cycles 
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First Wait lf BME=1, number of wait states on the first 
0-31 PerClk cycles transfer of a burst. 


Burst Wait If BME=1, number of wait states on non-first 
0-7 PerClk cycles transfers of a burst. 


Sample on Ready 

0 Data transfer occurs one PerClk cycle after 
PerReady is sampled active 

1 Data transfer occurs in the same PerClk 

cycle that PerReady becomes active 


Byte Enable Mode If BEM=0, PerWBE0:3 timing is controlled by 
0 PerWBE0:3 are only active for write cycles WBN and WBF. If BEM=1, PerWBE0:3 has 
1 PerWBEO:3 are active for read and write the same timing as PerAddr0:31. 

cycles 


The EBC implements odd parity. 


Reserved 
12:13 Chip Select On Timing Number of cycles from peripheral address 
0-3 PerClk cycles - driven to PerCSn low. 
14:15 |OEN | Output Enable On Timing Number of cycles from PerCSn low to 
0-3 PerClk cycles PerOE low. 
eee Byte Enable On Timing If BEM=0, number of cycles from PerCSn 
Pee ine PerClk cycles low to PerWBE0:3 active. 
nal 19 | WBF | Write Byte Enable Off Timing lf BEM=0 and RE=0, number of cycles 
0-3 PerClk cycles PerWBEn becomes inactive prior to PerCSn 
inactive. 
20:22 | TH Transfer Hold Contains the number of hold cycles inserted 
0-7 PerClk cycles at the end of a transfer. 
23 Ready Enable 
O PerReady is disabled 
1 PerReady is enabled 
ae 
Parity Enable 
0 Disable parity checking 
1 Enable parity checking 
a 
¢ BME (Burst Mode Enable, bit 0) — Controls bursting for cache line fills and flushes, PLB burst 
transfers and all packing and unpacking operations. If BME=1, bursting is enabled. When bursting . 
is enabled the parameters Chip Select On (CSN), Output Enable On (OEN), and First Wait (FWT) 
apply only to the first transfer, while Burst Wait (BWT) and Write Byte Enable On (WBN) apply 
during all remaining transfers of the burst. 
¢ TWT (Transfer Wait, bits 1:8) — Specifies the number of wait states taken by each transfer to the 


bank. The number of cycles from address valid to the deassertion of PerCSn is (1 + TWT), where 
0< TWT < 255. This field is used for non-burst transfers (field BME = 0). 


e FWT (First Wait, bits 1:5) — Specifies the number of wait states to be taken by the first access to the 
bank during a burst transfer (field BME = 1). During a burst the number of cycles from the first 
address valid to the second address is (1 + FWT), where 0 < FWT < 31. 
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BWT (Burst Wait, bits 6:8) — Specifies the number of wait states to be taken by accesses beyond 
the first during a burst transfer (field BME = 1). On burst accesses except for the last, the number of 
cycles from address valid to the next valid address on each burst access is (1 + BWT), where 

0 < BWT <7. On the last burst access, the number of cycles from address valid to the deassertion 
of PerCSn is (1 + BWT), where 0 < BWT <7. 


CSN (Chip Select On Timing, bits 12:13) — Specifies the chip select turn on delay relative to the 
address. PerCSn may turn on coincident with the address or be delayed by 1, 2, or 3 PerClk cycles. 


OEN (Output Enable On Timing, bits 14:15) — Specifies when the output enable signal, PerOE, is 
asserted for read operations relative to the chip select signal. If 0, PerOE is asserted coincident 
with the chip select. If 1, 2 or 3, PerOE is delayed by 1, 2, or 3 PerClk cycles. 


WBN (Write Byte Enable On Timing, bits 16:17) — Specifies when the write byte enables, 
PerWBE0:3, are asserted relative to the chip select signal. If 0, then PerWBEO:3 turns on 
coincident with the chip select. If 1, 2, or 3, then PerWBEO0:3 is delayed 1, 2, or 3 PerClk cycles 
from the chip select. 


WBF (Write Byte Enable Off Timing, bits 18:19) — Specifies when the write byte enables are 
deasserted, relative to the deassertion of the chip select signal. If WBF=0, PerWBE0:3 goes high 
coincident with the chip select signal. If WBF is 1, 2, or 3, then PerWBE0:3 turns off 1, 2, or 3 
PerClk cycles before the turn-off of the chip select signal. 


Programming Note: It is an error to set WBF > BWT. Moreover, for device-paced transfers 
(EBCO._BnAP[RE]=1) WBF must be set to zero. 


TH (Transfer Hold, bits 20:22) — Specifies the number of PerClk cycles (0 through 7) that the 
peripheral bus is held idle after the deassertion of PerCSn. During these cycles, the address bus 
and data bus are active and PerR/W is valid. During the hold time, chip select, output enable, and 
write byte enables are inactive. If Ready Mode is used (RE=1) along with Sample on Ready 
(SOR=1) TH must be set to at least 1. 


RE (Ready Enable, bit 23) —- Controls the use of the PerReady input signal. If RE=0, the PerReady 
input is ignored and no additional wait states are inserted into bus transactions. If RE=1, the 
PerReady input is examined after the wait period expires; additional wait states are inserted if the 
PerReady input is 0. The maximum number of wait states in each transaction is determined by the 
settings in the Device-Paced Timeout Disable (PTD) and Ready Timeout Counter (RTC) fields in 
EBCO_CFG. If EBCO_CFG[PTD]=0, the ready timeout function is disabled and the PPC405GP 
waits indefinitely until PerReady=1. If EBCO_CFG[PTD]=1, the PPC405GP waits the number of 
cycle indicated by EBCO_CFG[RTC] cycles for PerReady to become active. If PerReady does not 
become active in the allotted time, the address of the error is logged in EBCO_BEAR and the type 
of error is captured in either EBCO_BESRO or EBCO_BESR1. 


SOR (Sample Ready, bit 24) — Controls the location of the data transfer cycle with respect to the 
PerReady input. If SOR=1 the data transfer occurs on the same PerClk edge that PerReady is 
sampled active, whereas if SOR=0 the data transfer occurs one cycle later. 


BEM (Byte Enable Mode, bit 25) — Controls whether PerWBE0:3 is active during writes or for both 
reads and writes. 


PEN (Parity Enable Mode, bit 26) — Enables parity generation and checking. 
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16.7 Error Reporting 


The EBC monitors four kinds of errors when performing read and write transfers. Of these four, bank 
protect and external bus errors are always checked, while timeout and read parity error checking must 
be enabled via DCR-mapped configuration registers. 


¢ Protect Error — Requested read or write operation violates the bank usage programmed in 
EBCO_BnCR(BU]. For example, write attempt to read-only bank. In all cases, no external bus 
activity occurs. 


¢ External Bus Error — The PerErr input was sampled active during the data transfer cycle of a read 
or write operation. The associated data is read or written as usual. 


¢ Timeout Error — This error is possible during memory operations when both PerReady sampling is 
enabled, EBCO_BnAP[RE]=1, and device paced timeouts are enabled, EBCO_CFG[PTD]=0. 
Whenever the peripheral address bus changes the EBC begins counting PerClk cycles. If the count 
reaches the value represented by EBCO_CFG[RTC] a timeout error occurs. Note that timeout 
errors are not possible during the peripheral portion of DMA transfers. 


¢ Parity Error — Indicates that the parity calculated for the read data did not match the parity read. 
Parity generation and checking is enabled for memory operations by setting EBCO_BnAP[PEN]=1 
and for DMA peripheral transfers by programming DMAO_CRn[PCE]=1. 


When the EBC slave detects one of the above errors it reports the error condition to the PLB 
master that initiated the transfer. The EBC also logs the type of error into EBCO_BESRO or 
EBCO_BESR1 and the address of the error in EBCO_BEAR. 


16.7.1 Error Locking 


The PCl Bridge and Media Access Layer (MAL) controllers may qualify their PLB transactions to the 
EBC such that the information describing any errors that occur during these transfers becomes 
locked. When an error is locked, subsequent errors are not permitted to overwrite the information 
detailing the first error. 


When a master requests error locking an error locks not only the EBCO_BESRn field for the master, 
but also the EBCO_BEAR. These remain locked until software clears them. For each PLB master that 
supports error locking the EBC has a EBCO_BESRn field containing two bits associated with error 
locking. One is the field lock bit and the other is the address lock bit. When an error is detected with 
locking enabled the field lock bit is set to a value of one. Setting the field lock bit prevents subsequent 
errors for this master from being logged and overwriting the contents of the field. In addition, the 
address lock bit is set if no other master has previously locked the EBCO_BEAR. Once the 
EBCO_BEAR is locked, no future errors from this or any master can update the EBCO_BEAR until 
software clears the lock bits. When software processes an error it should clear the error status and 
both lock bits at the same time. 


16.7.2 Peripheral Bus Error Address Register (EBCO_BEAR) 


The Peripheral Bus Error Address Register (EBCO_BEAR) is a 32-bit register containing the address 
of the access where a data bus error occurred. If the master that initiated the transfer requested error 
locking, and the EBCO_BEAR is not already locked, the contents of EBCO_BEAR are locked until the 
lock bit in one of the Peripheral Bus Error Status Registers (EBCO_BESRO or EBCO_BESR’1) is 
cleared. The contents of the EBCO_BEAR are accessed indirectly through the EBCO_CFGADDR and 
EBCO_CFGDATA registers using the mfder and mtdecr instructions. 
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Precise address capture in the EBCO_BEAR when a parity error occurs only applies to devices with at 
least one cycle of hold time: EBCO_BnAP[TH] > 0. This is because parity errors are not calculated 
until the cycle after the data was valid on the external bus, and the EBCO_BEAR is loaded with the 
address on the bus during that cycle. If the device timings do not include at least one hold cycle, the 
address may transition to the next address in a burst or the address of a new transaction before the 
EBCO_BEAR latches the value. 


Figure 16-18. Peripheral Bus Error Address Register (EBCO_BEAR) 


0:31 a Address of Bus Error (asynchronous) 


16.7.3 Peripheral Bus Error Status Register 0 (EBCO_BESRO) 


The Peripheral Bus Error Status Register 0 (EBCO_BESRO) records the occurrence and type of 
errors for transactions attempted on behalf of the CPU, EBC External Bus Master and PCI Bridge. 
The contents of EBCO_BESRO are accessed indirectly through the EBCO_CFGADDR and 
EBCO_CFGDATA registers using the mfdcr and mtder instructions. 


It is possible to have both a parity error and a bus error during the same data transfer. If this occurs, 
the bus error is detected first and EBCO_BESRO and EBCO_BEAR are updated. In the next cycle the 
parity error is detected and, if error locking is not enabled, logged in EBCO_BESRO. 


EETO EET1 EET2 EET3 FL3 


RWSO RWS1 '  RWS2 RWS3_ AL3 


Figure 16-19. Peripheral Bus Error Status Register 0 (EBCO_BESR0) 


Error type for master 0 Master 0 is the processor instruction fetcher. 
000 No error 

001 Parity error 

010 Reserved 

011 Reserved 

100 Protection error 

101 Reserved 

110 External bus input error 

111 External bus timeout error 


Read/write status for master 0 
O Error operation was a write operation 
1 Error operation was a read operation 
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EET1 | Error type for master 1 Master 1 is the processor data side. 
000 No error 
001 Parity error 
010 Reserved 
011 Reserved 
100 Protection error 
101 Reserved 
110 External bus input error 
111 External bus timeout error 


RWS1_ | Read/write status for master 1 
0 Error operation was a write operation 
1 Error operation was a read operation 


font | [reseres 


12:14 | EET2 | Error type for master 2 Master 2 is the external bus master. 
000 No error 
001 Parity error 
010 Reserved 
011 Reserved 
100 Protection error 
101 Reserved 
110 External bus input error 
111 External bus timeout error 


15 RWS2_ | Read/write status for master 2 
0 Error operation was a write operation 
1 Error operation was a read operation 


fea? [renee 


18:20 |EETS | Error type for master 3 Master 3 is the PCI bridge. 
000 No error 
001 Parity error 
010 Reserved 
011 Reserved 
100 Protection error 
101 Reserved 
- | 110 External bus input error 
111 External bus timeout error 


RWS3 | Read/write status for master 3 
0 Error operation was a write operation 
1 Error operation was a read operation 


Field lock for master 3 : 
0 EETS and RWSS3 fields are unlocked 
1 EETS3 and RWS3 fields are locked 


EBCO_BEAR address lock for master 3 
0 EBCO_BEAR address unlocked 
1 EBCO_BEAR address locked 


eet [reed SSCS 
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16.7.4 Peripheral Bus Error Status Register 1 (EBCO_BESR1) 


The Peripheral Bus Error Status Register 1 (EBCO_BESR71) records the occurrence and type of 
errors for transactions attempted on behalf of the MAL and DMA controllers. The contents of 
EBCO_BESRi are accessed indirectly through the EBCO_CFGADDR and EBCO_CFGDATA registers 
using the mfdcr and mtdcr instructions. 


It is possible to have both a parity error and a bus error during the same data transfer. If this occurs 
the bus error is detected first and EBCO_BESR1 and EBCO_BEAR are updated. In the next cycle the 
parity error is detected and, if error locking is not enabled, logged in EBCO_BESR1. 


EET5 FL5 
Oe s]6 8] 9 [10/11/12 ee eee) 
RWS5_ ALS 


Figure 16-20. Peripheral Bus Error Status Register 1 (EBCO_BESR1) 
Master 4 is the MAL. 


Error type for master 4 
000 No error 

001 Parity error 

010 Reserved 

011 Reserved 

100 Protection error 
101 Reserved 

110 External bus input error 
111 External bus timeout error 


Read/write status for master 4 
O Error operation was a write operation 
1 Error operation was a read operation 


Field lock for master 4 
0 EET4 and RWS4 fields are unlocked 
1 EET4 and RWS4 fields are locked 


EBCO_BEAR address lock for master 4 
0 EBCO_BEAR address unlocked 
1 EBCO_BEAR address locked 


Error type for master 5 Master 5 is the DMA controller. 
000 No error 

001 Parity error 

010 Reserved 

011 Reserved 

100 Protection error 

101 Reserved 

110 External bus input error 

111 External bus timeout error 


Read/write status for master 5 
0 Error operation was a write operation 
1 Error operation was a read operation 
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Field lock for master 5 
0 EETS5 and RWSS5 fields are unlocked 
1 EET5 and RWSS fields are locked 


EBCO_BEAR address lock for master 5 
0 EBCO_BEAR address unlocked 
1 EBCO_BEAR address locked 


fasi[ [Pewee SSCSCSCSCSCS~SCSCSC*Y 
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Chapter 17. PCI Interface 


17.1 PCI Overview 


The peripheral component interconnect (PCI) interface and bridge (referred to as PCI bridge in this 
chapter) provides a means for connecting PCl-compliant devices to the on-chip bus architecture of 
the PPC405GP chip. The PCI bridge complies with PC/ Specification, Version 2.2. The PCI bridge is 
bidirectional in that it allows PPC405GP PLB masters to access PCI targets off-chip. It also allows 
PCI masters to access PLB slave devices such as the SDRAM controller. The PCI bridge contains an 
arbiter which can optionally be used for host applications. 


The PCI bridge is configurable by an external PCI agent, allowing it to be used in target adapter 


applications. The PCI bridge contains address mapping register sets to provide address mapping for 
both transaction directions. See Figure 17-3 on page 17-5 for a graphic overview of the PCI bridge. 


Agents on the PLB are referred to as masters or slaves. Agents on the PCI are referred to as targets 
or slaves. 


17.1.1 PCl Bridge Features 


PLB bus frequency up to 100 MHz 

PCI bus frequency up to 66 MHz (asynchronous) or 33 MHz (synchronous) 
Asynchronous clocking between PLB and PCI buses (optional) 
Supports 1:1, 2:1, 3:1, and 4:1 clock ratios from PLB to PCI 
32-bit PCI Address/Data Bus 

Power Management 

Buffering: 

— PCI target 64-byte write post buffer 

— PCI target 96-byte read prefetch buffer 

— PLB slave 32-byte write post buffer 

— PLB slave 64-byte read prefetch buffer 

Error tracking/status 

PCI arbitration function (optional) 

Supports PCI target-side configuration 


Supports processor access to all PCI address spaces: 


Single-beat PCI I/O reads and writes 


PCI memory single-beat and prefetch-burst reads and single-beat writes 


Single-beat PCI configuration reads and writes (type 0 and type 1) 


PCI interrupt acknowledge 


Preliminary PCI Interface 
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17.1.2 PCI Bridge Block Diagram 
Figure 17-1 shows the PCI bridge block diagram. 


Processor Local Bus (PLB) 


Configuration 
PLB Slave Interface Registers PLB Master Interface 
Buffer Buffer 
Interlock Read Write 
Buffer Buffer 
PCI Master Interface PCI Target Interface 


PCI 
Arbiter 


Figure 17-1. PCI Bridge Block Diagram 


17.1.3 Byte Ordering 


The PCI bridge configuration register address space must be treated as little endian, as required by 
PCI Specification, Version 2.2. In most cases data memory areas in PCI address space will be 
configured and used in little endian format. To provide for this, PCI configuration space and memory 
map regions should be defined as little endian memory space by means of the corresponding entry in 
the PPC405GP CPU’s MMU or by means of the appropriate memory region bit in the Storage Little- 
Endian Register (SLER) if the MMU is not being used. Because the endianness attribute in the SLER 
can only be applied to 128MB memory regions, this method of defining little endian memory space for 
PCI must be carefully considered in defining a system memory map. 


Byte ordering and management of little endian memory space from a PowerPC CPU point of view is 
described in detail in “Byte Ordering” on page 3-28. PowerPC architecture and CoreConnect bus 
architecture both use a bit naming convention in which the most significant bit (msb) name 

- incorporates the numeral 0 and the least significant bit (Isb name for a 32-bit vector incorporates the 
numeral 31. Table 17-1 shows the correspondence of address bit-naming conventions for PowerPC, 
CoreConnect PLB, and PCI interface. 
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Table 17-1. PowerPC, CoreConnect PLB, and PC! Address Bit-Naming Conventions 


Table 17-2 shows the correspondence of data bus bit naming conventions and data lane connections 
for PowerPC, CoreConnect PLB, and PCI interface. Note that within a data lane (column), the data 
signal naming indicates that, for example, AD31is connected to PLB Write Data24. 


Table 17-2. PowerPC, CoreConnect PLB, and PCI Data Bus Bit-Naming Conventions 


Most Significant Least Significant 
Functional Unit/ Interface Byte (MSB) o eo Byte (LSB) 
A a a 
Little Endian Byte Address (Obnn) 


PPC405GP Processor Core Data24:31 4 23 — 15 i 7 
(Write) Data Bus 

CoreConnect — PLB Write Data PLB Write PLB Write PLB Write PLB Write 
Bus — Byte Group Data24:31 Data16:23 Data8:15 Data0:7 


PLB Byte Enable PLB_BE3 PLB_BE2 PLB_BE1 PLB_BEO 
‘| PCI Byte Enable C/BE3 C/BE2 C/BE1 C/BEO 
PCI Data Bus — Byte Group AD31:24 AD23:16 AD15:8 AD7:0 


Note 1: Logical data work (32-bit word) == 0x11223344 
Note 2: 405 CPU performing either: 


¢ Store word to little endian memory space 
e Store word—byte reversed—to big endian address space 


17.1.4 Reference Information 


PLB Overview Chapter 2, “On-Chip Bus” 


Register Summary Chapter 25, “Register Summary” 
Clocking Chapter 7, “Clocking” 
PCI Specification, Version 2.2 
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17.2 PCI Bridge Functional Blocks 
The following sections describe the PCI bridges and the associated arbiter. 


17.2.1 PLB-to-PCl Half-Bridge 


As shown in Figure 17-2, the 64-bit PLB slave interface and PCI master interface function together as 
a PLB-to-PCI half-bridge to enablePLB master devices to access PCI target devices. The half-bridge 
configuration contains a 32-byte write post buffer and a 64-byte read prefetch buffer. 


PLB Master 


PLB Slave Interface 


Acknowledge Request 


Read Write 
Prefetch Post PCI Bridge 
Buffer Buffer 
PCI Master Interface 
Acknowledge Request 


PCI Target 


Figure 17-2. PLB-to-PCl Half-Bridge Block Diagram 
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17.2.2 PCI-to-PLB Half-Bridge 


As shown in Figure 17-3, the PCI target interface and 64-bit PLB master interface function together as 
a PCl-to-PLB half-bridge to enable PCI master devices to access PLB slave devices. The half-bridge 
configuration contains a 63-byte write post buffer and a 96-byte read prefetch buffer. 


PLB Slave 


PLB Master Interface 


Acknowledge Request 


Read Write 
Prefetch Post PCI Bridge 
Buffer Buffer 
PCI Target Interface 
Acknowledge Request 


Figure 17-3. PCl-to-PLB Half-Bridge Block Diagram 


17.2.3 PCI Arbiter 


The internal arbiter can be used with up to six external PCI masters (six Req/Gnt pairs) or can be 
disabled. When the internal arbiter is disabled, there is one Req/Gnt pair that must be attached to an 
external arbiter. A strapping pin determines whether the internal arbiter is enabled or not. Priority is 
round-robin (rotating). Priority switches when a master begins a transfer by asserting Frame. Each 
block keeps a priority bit that only switches if its highest priority requestor receives a grant. Assuming 
that all priority bits are initially cleared and all requests are active, an example rotation would be 
PPC405GP 3, 1, 5, 0, 4, 2. PC! Specification, Version 2.2 requires that all PCI devices three-state 
their pins during reset. The PPC405GP PCI arbiter supports bus parking during normal operation. 


Figure 17-4 shows the logical arbitration structure. 


PPC405GP Bridge PCI Master 0 
PCIReq0 1 


PCIReq1 0 
PCIReq2 1 
Arbitration Winner 
PCIReq3 
PCIReq4 


PCIReq5 
Figure 17-4. Arbitration Structure 
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17.3. PCI Bridge Address Mapping 


The following sections describe the address maps supported by the PCI bridge. 


17.3.1 PLB-to-PCl Address Mapping 


The PCI bridge responds as a slave on the PLB bus in several address ranges. These ranges enable 
a PLB master to configure the PCI bridge, and to cause the PCI bridge to generate memory, I/O, 
configuration, interrupt acknowledge, and special cycles to the PCI bus. Table 17-3 shows the 
address map from the view of the PLB, that is, as decoded by the PCI bridge as a PLB slave. 


Table 17-3. PLB Address Map 
PLB Address | PCI Address 
Range Description Range 

OxE8000000— | PCI I/O 0x00000000- 
OxE800FFFF | Accesses to this range are translated to an I/O access on PCI 0x0000 FFFF 

in the range 0 to 64KB — 1. 
0E8010000- | Reserved 
QE87FFFFF | PCI bridge does not respond. 

(Other bridges use this space for non-contiguous I/O.) 
OxE8800000- | PCI I/O 0x00800000- 
OxEBFFFFFF | Accesses to this range are translated to an I/O access on PCI |: Ox03FF FFFF 

in the range 8MB to 64MB -— 1. 

0xEED00000 write: Special Cycle 

0xEED00004-0xEEDFFFFF: Reserved (can mirror Interrupt 


OxEC000000- | Reserved Pe 
Acknowledge and Special Cycle). i 


OxEEBFFFFF | PCI bridge does not respond 
OxEEEQOOO0O- | Reserved 
OxEF3FFFFF | PCI bridge does not respond. 


OxEECOO000-— | PCICO_CFGADDR and PCICO_CFGDATA 
OxEECFFFFF | 0xEEC00000: PCICO_CFGADDR 
OxEEC00004: PCICO_CFGDATA 
0xEEC00008-0xEECF FFFF: Reserved (can mirror 
PCICO_CFGADDR and PCICO_CFGDATA). 


OxEEDOO000-— | PCI Interrupt Acknowledge and Special Cycle 
OxEEDFFFFF | OxEED00000 read: Interrupt Acknowledge 
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Table 17-3. PLB Address Map (continued) 


PCI Address 
Description Range 


PCI Bridge Local Configuration Registers 


PLB Address 


Range 


OxEF400000- 
OxEF4F FFFF 


OxEF400000 
OxEF400004 
OxEF400008 


OxEF400010 
OxEF400014 
OxEF400018 


OxEF400020 
OxEF400024 
OxEF400028 


OxEF400030 
OxEF400034 


: PCILO_PMMOLA 
: PCILO_PMMOMA 
: PCILO_PMMOPCILA 


OxEF40000C: PCILO_PMMOPCIHA 


: PCILO_LPMM1LA 
: PCILO_LPMM1MA 
: PCILO_PMM1PCILA 


OxEF40001C: PCILO_PMM1PCIHA 


: PCILO_LPMM2LA 
: PCILO_PMM2MA 
: PCILO_PMM2PCILA 


OxEF40002C: PCILO_PMM2PCIHA 


: PCILO_PTM1MS 
: PCILO_PTM1LA 


OxEF400038: PCILO_PTM2MS 
OxEF40003C: PCILO_PTM2LA 
0xF400040—-0xEF4FFFFF: Reserved (can mirror PCl local . 
registers) 


PC! Memory—Range 0 

PMM 0 registers map a region in PLB space to a region in PCI 
memory space. The address ranges are fully programmable. 
The PCI address is 64 bits. 


PCI Memory—Range 1 
PMM 1 registers map a region in PLB space to a region in PCl 
memory space. The address ranges are fully programmable. 

The PCI address is 64 bits. 


PCI Memory—Range 2 
PMM 2 registers map a region in PLB space to a region in PCI 
memory space. The address ranges are fully programmable. 

The PCI address is 64 bits. 


0x00000000- 
OxFFFFFFFF" 


0x0000000000000000- 
OxFFFFFFFFFFFFFFFF 


0x00000000— 
OxFEFFFFFF* 


0x0000000000000000- 
OxFFFFFFFFFFFFFFFF 


0x00000000- 
OxFFFFFFFF* 


0x0000000000000000- 
OxFFFFFFFFFFFFFFFF 


* Memory map ranges are fully programmable. The ranges must not overlap with each other or conflict with any 
other memory mappings. 


Three PCI bridge address ranges, associated with PLB masters in PLB space, are mapped to PCI 
memory space: PCI master map (PMM) 0, PMM1, and PMM2. 


Each PMM is configured using the following registers (nis 0, 1, or 2, corresponding with PMMO, 
PMM1, and PMM2, respectively): 

¢ PMMnhLocal Address (PCILO_PMMnLA) 

¢ PMMnMask/Attribute (PCILO_PMMnMA) 

¢ PMMnPCI Low Address (PCILO_PMMnPCILA) 

¢ PMMnPCI High Address (PCILO_PMMnPCIHA) 

The location of each PMM in PLB space is programmable, using the PCILO_PMMnLA registers. The 


PLB address range assigned to each PMM should not overlap any other PLB address space range 
that is used or reserved. Overlapping results in undefined behavior. 
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The range of PCI memory address space associated with each PMM is also programmable, and is a 
64-bit address space to enable address translation between the PCI bus and the PLB. The 
PCILO_PMMnPCILA registers contain the low-order word of a PCI address; the PCILO_PMMnPCIHA 
registers contain the high-order word of a PCI! address. If the high-order word of a PCI address is 
greater than 0, the PCI bridge generates dual address cycles to the PCI. 


The size of each PMM is programmable, using the mask portion of the PCILO_PMMnMA registers. The 
size is a power of 2, ranging from 4KB-4GB. The PLB and PCI address spaces for each PMM are 
aligned to the size contained in the associated PCILO_PMMnMaA registers. 


The attribute portion of the PCILO_PMMnMaA registers specify whether the associated PMM is 
enabled or disabled, and marked as prefetchable or not prefetchable. 


Address ranges and attributes should be initialized before a PMM is enabled. 


Figure 17-5 shows the detail of the PMM register sets used to map PLB memory regions to PCI 


address space. 
PMM # Local Address 


PCI Memory 
Region 


Size PLB Memory 
Region 


Starting Address Starting Address 


PMM # PCI 
High Address 


Figure 17-5. PMM Register Sets Map PLB Address Space to PCI Address Space 


17.3.2 PCl-to-PLB Address Mapping 


The PCI bridge responds as a PCI target for memory accesses and configuration Type 0 accesses. 
Table 17-4 shows the PCI memory address map from the view of PCI, that is, as decoded by the PCI 


bridge as a PCI target. 
Table 17-4. PCl Memory Address Map 


PCI Memory 
Address Description PLB Address 


0x00000000-— | System Memory or ROM—Range 0 0x00000000- 
OxFFFFFFFF | PTM1 maps a region of PCI memory space to PLB space, which can OxFFFF FFFF 
map to system memory or ROM. Size and location is programmable. 


The space supports address translation between the PCI and the PLB. 


0x00000000— | System Memory or ROM—Range 1 0x00000000- 
OxFFFFFFFF | PTM 2 maps a region of PCI memory space to PLB space, which can OxFFFFFFFF 
map to system memory or ROM. Size and location is programmable. 
The space supports address translation between the PCI and the PLB. 
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17.3.3. PCI Target Map Configuration 


Two PCI bridge address ranges in PCI memory space are mapped to PLB space: PCI target map 
(PTM1) and PTM2 (PTMO is reserved). 


Each PTM is configured using the following registers (n is 1 or 2, corresponding with PTM1 and 
PTM2, respectively). 


¢ PTMnMemory Size (PCILO_PTMnMS) 
¢ PTMnLocal Address (PCILO_PTMnLA) 
¢ PTMnBAR (PCILO_PTMnBAR) 


The size of each PTM is programmable, using the PCILO_PTMnMS registers. The size is a power of 
2, and ranges from 4KB-4GB. The PLB and PCI address spaces for each PTM are aligned to this 
size. - 


The address range of PLB space accessed through each PTM is also programmable, enabling 
address translation between the PCI bus and the PLB. The PLB address range is defined in the 
PCILO_PTMnLA registers. 


The location of each PTM in PCI memory space is programmable, using the PCIPCILO_PTMnBAR 
registers. 


The PTMs are enabled and disabled using PCICO_CMD[MA]. PTM address ranges and sizes should 
be initialized before being enabled. If the PCI bridge is not the host bridge, the local processor must 
initialize the PTM size before enabling host configuration setting the Host Configuration Enable (HCE) 
field of the Bridge Options 2 register (PCICO_BRDGOPT2). This ensures that the host experiences 
proper behavior from the PCILO_PTMnBAR registers. Note that PTM1 is always enabled. The PTM1 
registers must always be initialized. 


Figure 17-6 shows the detail of the PMM/BAR register sets used to map PCI memory regions to PLB 
address space. 


PTM #/BAR # 


PTM # Local Address 


— eee ee a > 
PCI Memory PLB Memory 


Region 


Region 


PTM # BAR - PCI 
Base Address 


Starting Address Starting Address 


Figure 17-6. PTM Register Sets Map PCI Address Space to PLB Address Space 
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17.4 PCI Bridge Transaction Handling 
The following sections discuss PCI bridge transactions and completion ordering. 


17.4.1 PLB-to-PCI Transaction Handling 


This section describes how the PCI bridge responds to read and write requests from a PLB master. 
The PCI bridge decodes and accepts PLB transactions to different address ranges resulting in the 
generation of memory, I/O, configuration, interrupt acknowledge and special cycles on the PCI bus. 


Table 17-5. Transaction Mapping: PLB —> PCI 


PLB Transaction PCI Transaction 
PLB Master — Bridge Bridge Mapping and Bridge (PCI Master Interface) — PCI 
(PLB Slave Interface) Qualifications Target 
Single-beat 1 — 8-byte Read 64KB or 56MB PCI I/O /O Read 
ree EES Teasressrange | 
Single-beat 1 — 8-byte Write 64KB or 56MB PCI I/O I/O Write 
address range 
Single-Beat 1 — 8-byte Read Access to PCICO_CFGDATA | Configuration Read (Type 0, 1) 
ee ee oe ee | 
Single-Beat 1 — 8-byte Write Access to PCICO_CFGDATA | Configuration Write (Type 0, 1) 
register 
Single-Beat 1 — 8-byte Read PLB address decodes to Memory Read 
PMMO, PMM1, or PMM2, 
nonprefetchable 
Burst Read PLB address decodes to Memory Read 
PMMO, PMM1, or PMM2, 
nonprefetchable 
PLB 4-word and 8-word Line Reads | PLB address decodes to eee | Read Line 
PMMO, PMM1, or PMM2 
Single-Beat 1 — 4-byte Read PLB address decodes to poe Read Multiple 
PMMO, PMM1, or PMM2, 
nonprefetchable 
Burst Read PLB address decodes to Memory Read Multiple 
PMMO, PMM1, or PMM2, 
nonprefetchable 
Single-Beat 1 — 4-byte Write PLB address decodes to Memory Write 
PMMO, PMM1, or PMM2 
Burst Write PLB address decodes to Memory Write 
PMMO, PMM1, or PMM2 


| Ss Not supported Memory Write and Invalidate 
| Nott supported Memory Write Line 


17.4.1.1 PCI Master Commands 


The type of cycle generated to the PCI bus depends on the PLB address, the type of PLB transfer, 
and the data size. The following sections describe the transaction types supported and outlines the 
translation of commands from one bus to the other. 
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The terms “single beat” or “1—-8-byte,” in reference to PLB transfers, refer to the M_size=0000 
transaction type. 


PCI bridge initiates the following commands as a PCI master: 


e |/O Read and I/O Write 


This command is generated in response to PLB 1-8-byte read or write requests that decode to one 
of the two PCI I/O spaces. 


Configuration Read and Configuration Write (type 0 and type 1) 


This command is generated in response to PLB 1-8-byte read or write requests that decode to the 
PCICO_CFGDATA register. 


¢ Memory Read 


This command is generated in response to PLB 1-8-byte reads or byte and halfword burst reads 
that decode to one of the three PMMs when the PMM is marked as nonprefetchable. 


¢ Memory Read Line 


This command is generated in response to PLB 4- and 8-word line reads or word and doubleword 
reads of 32 bytes or less that decode to one of the three PMMs. 


¢ Memory Read Multiple 


This command is generated in response to PLB 1-8-byte reads or byte and halfword burst reads 
that decode to one of the three PMMs when the PMM is marked as prefetchable. This command is 
also generated in response to word and doubleword burst reads of greater than 32 bytes that 
decode to one of the three PMMs. For prefetches, the PCI bridge bursts up to a 64 bytes from the 
PCI. 


¢ Memory Write 


This command is generated in response to PLB 1-8-byte writes or burst writes to one of the three 
PMMs. 


e Interrupt Acknowledge . 

This command is generated in response to a PLB 1-8-byte read from address OxEEDO0000. 
¢ Special Cycle 

This command is generated in response to a PLB 1-8-byte write to address OxEEDOOOO00. 


The Memory Write and Invalidate command is not generated. All PC! memory writes are performed 
with Memory Write. 


The PLB slave responds as a 64-bit device to word and doubleword bursts. All other commands 
receive a 32-bit response. 


The PCI bridge supports PLB size 1-8-byte encodings. Burst reads of all sizes are also supported. 
Read line sizes greater than eight words are not supported, and no line writes are supported. The PCI 
bridge posts all writes which are decoded to PCI memory and PCI I/O space. Posted data is kept in 
internal write buffers until it can be transferred to the PCI bus. All other writes and all reads are 
connected, that is, they complete on the PCI bus before completing on the PLB. 
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17.4.1.2 PLB Slave Read Handling 


PLB master read requests are decoded into four types: PCI Memory, I/O, Configuration, and Interrupt 
Acknowledge. If the request falls within any of these ranges, and is a supported command type, the 
bridge claims the cycle initially by asserting a PLB wait signal (as opposed to a PLB address 
acknowledge signal). The bridge must first gain access to the PCI bus before acknowledging a PLB 
read request. The specific timing of the address acknowledge is dependent upon the type of transfer. 
All posted writes must be flushed before a read is allowed to complete. 


For PLB line reads, the PCI bridge must wait for all read data to be received before acknowledging the 
PLB request. This is because PCI targets are allowed to disconnect in the middle of a transfer, and 
the PLB requires line transfers to be atomic. If the system can guarantee that PCI targets do not 
disconnect these reads, PCICO_BRDGOPT1[APLRM] can be set to 1. In this mode, line read 
performance is improved by having the bridge PLB slave assert an address acknowledge signal and 
begin its data tenure as soon as the first word is received on the PCI bus. If the above guarantee 
cannot be made, the setting of this bit could hang the bridge. 


If the PCI cycle Master Aborts, all beats of read data are returned as OxFFFFFFFF. 


PLB master reads to the PCI bridge configuration registers are allowed to execute regardless of 
whether any write data is posted in the bridge. The configuration registers are described in “PCI 
Bridge Configuration Registers” on page 17-19. 


17.4.1.3 Prefetching 


When the PCI bridge receives a PLB 1-8-byte or byte or halfword burst read request that decodes to 
a PMM marked as nonprefetchable. The PCI bridge runs a single beat read to the PCI. If the PC! 
cycle is retried, the PLB cycle is rearbitrated. 


When the PCI bridge receives a PLB 1—8-byte or byte or halfword burst read request that decodes to 
a PMM marked as prefetchable, the PCI bridge burst reads up to a 64 bytes from the PCI and saves 
the data in the PLB slave read prefetch buffer. Less than 64 bytes can be read if the PCI target 
disconnects, or if the PCI bridge PCI master disconnects due to a master latency time out. Note that 
PCI bridge prefetching is not affected by memory management page boundaries (PLB_Guarded is 
ignored). If a subsequent PLB 1—8-byte or byte or halfword burst read is contained in the prefetch 
buffer, the data is returned to the PLB directly from the prefetch buffer, and no cycle is generated on 
the PCI. 


If a PLB read to the PCI bridge occurs while the PCI bridge is prefetching and does not hit in the 
prefetch buffer, then the PLB read is rearbitrated. After prefetching completes, any PLB read (of any 
type or address range) to the PCI bridge that does not hit in the prefetch buffer causes the prefetch 
buffer to be emptied, and a new PCI read to begin. PLB writes, including configuration writes, will 
invalidate the prefetch buffer. — 


17.4.1.4 PLB Slave Write Handling 


PLB master write requests are decoded into four types: PCI Memory (one of three PMM ranges), PCI 
I/O, PCI Configuration, or Special Cycles. If the request falls within any of these ranges, and is a 
supported command type, the bridge claims the cycle by asserting a PLB wait signal. If the write is 
connected, or translates to a PC! Configuration or Special Cycle, the bridge must gain access to the 
PCI bus and successfully transfer the data before it may assert a PLB address acknowledge signal. If 
the address is to PCI I/O or memory, the bridge immediately asserts a PLB address acknowledge 
signal and posts the write if there is sufficient buffer space. 
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Internal configuration writes are not allowed to execute if posted write data exists in either the PCI 
slave write buffer or the PLB slave write buffer. The internal configuration mechanism is described in 
“PCI Bridge Configuration Registers” on page 17-19. 


PLB Slave Write Post Buffer 


The PCI bridge has a 32-byte write post buffer that may contain four separate single-beat PLB write 
transactions or one burst. New PLB write requests are rearbitrated if there is not enough room in the 
write post buffer. 


The buffers are not snooped, and are always completed on the PCI bus in the same order as they are 
received on the PLB bus. 


Each write buffer entry preserves the master ID and drives the appropriate PLB bus busy signal until 
the write is deallocated (it completes on the PCI bus). It is recommended that PLB masters do not use 
PLB bus busy signal. Instead, PLB masters generating cycles to the PCI] should use the standard PCI 
mechanisms for data coherency. 


17.4.1.5 Aborted PLB Requests 
The PCI bridge aborts PLB reads only. 


A PLB master accessing the PCI bridge can abort PLB write cycles only under the following 
conditions: 


¢ The PCI bridge rearbitrates the cycle. 


¢ The PCI bridge does not see the cycle because the PLB bus is granted to some other master. A 
CPU/System Memory interface is expected to do this when a CPU cycle is pending to PCI bridge, 
but a PLB Master requests system memory access requiring snooping. 


Note: If a PLB master aborts the write cycle at any other time, the results are undefined and the 
bus may hang. 


17.4.1.6 Retried PC] Reads 


The PCI specification requires that a PCI master must repeat any read that is retried. The PCI bridge 
adheres to this requirement. It is only mentioned here because, under certain conditions with respect . 
to aborted PLB reads, the PCI bridge must execute a PCI read and discard the data. 


17.4.2 PCl-to-PLB Transaction Handling 


This section describes how PCI bridge handles read and write requests from a PC! master device. 
PCI bridge responds as a PCI target to PCI memory transactions when the PCI address is in one of 
the two PTM ranges and PCICO_CMD[MA] = 1. PCI bridge responds by claiming the PCI cycle and 
mastering a cycle on the PLB. 
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PCI bridge is also a PCI target for configuration cycles when its PCIIDSel pin is active. PCI bridge will 
master abort if a configuration cycle is run to itself. 


Table 17-6. Transaction Mapping: PCI — PLB 


PCI Transaction PLB Transaction 
PCI Master — Bridge (PCI Target Bridge Mapping Bridge (PLB Master Interface) > PLB 
Interface) and Qualifications Slave 


| Single-Beat Memory Read PCI address decodes _ | 8-byte/doubleword read 
to PTM1/BAR1 or 
PTM2/BAR2, memory 
access flag 


Burst Memory Read PCI address decodes _ | 8-byte/doubleword read 
to PTM1/BAR1 or 
PTM2/BAR2, memory 
access flag 


Memory Read Line PCI address decodes_ | Doubleword burst read 
to PTM1/BAR1 or 
PTM2/BAR2, memory 
access flag 


Memory Read Multiple PCI address decodes | Doubleword burst read 
to PTM1/BAR1 or 
PTM2/BAR2, memory 
access flag 


Memory Read PCI address decodes _ | Doubleword burst read 
to PTM1/BARi1 or 
PTM2/BAR2, memory 
access flag 


Single-Beat Memory Write PCI address decodes | 1 — 8-byte write 
to PTM1/BAR1 or 
PTM2/BAR2, memory 
access flag 


Single-Beat Memory Write and Invalidate | PCI address decodes _ | 1 — 8-byte write 
to PTM1/BAR1 or 
PTM2/BAR2, memory 
access flag 

Burst Memory Write PCI address decodes } Word burst write 
to PTM1/BAR1 or 
PTM2/BAR2, memory 

access flag 

Burst Memory Write and Invalidate PCI address decodes_ | Word burst write 
to PTM1/BAR1 or 
PTM2/BAR2, memory 
access flag 


[net spore [Memory tne read 
[Jn spores [Memory tine writes 


17.4.2.1 PLB Master Commands 


PCI bridge generates PLB transactions based on the type and length of received PCI transactions. 
The following sections describe the transaction types supported and outline the translation of 
commands from one bus to the other. 
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The term “single-beat” refers to the M_size = 0000 transaction type. PCI slave devices are referred to 
as “targets.” 


PCl bridge initiates the following PLB master commands: 
¢ 8-Byte Read: 

Generated in response to single beat or burst Memory Read commands from the PCI bus. 
¢ Doubleword Burst Read: 


Generated in response to Memory Read Line and Memory Read Multiple commands on the PCI 
bus. PCI bridge can also be programmed to perform doubleword bursts on behalf of Memory Read. 


¢ 1-8-Byte Write: 


Generated in response to single-beat (1-4 byte) Memory Write commands on the PCI bus; also 
generated when the PCI master uses non-contiguous byte enables (see “Byte Enable Handling” on 
page 17-17). 


¢ Doubleword Burst Write: 


Generated in response to burst Memory Write and Memory Write and Invalidate commands on the 
PCI bus. 


The PLB treats Memory Write and Memory Write and Invalidate identically (nothing on the PLB 
distinguishes a Memory Write from a Memory Write and Invalidate.) 


PCI bridge does not generate line reads or line writes on the PLB. 


17.4.2.2 Handling of Reads from PCI Masters 


PCI bridge responds to PC] Memory Read, Memory Read Line, and Memory Read Multiple 
commands. The PCI bridge initiates all PLB reads as single-beat or doubleword burst transfers. 


Memory Read generates a PLB single-beat doubleword read. Memory Read Line and Memory Read 
Multiple commands generate PLB doubleword bursts. For Memory Read Line, PCI bridge encodes a 
burst length on the byte enable pins of the PLB that corresponds to the number of doublewords from 
the start address to the end of a word boundary and terminates when the encoded number of words 
has been transferred. This is called a PLB fixed length burst. If the starting address is the last 
doubleword on a word boundary (typically, this should not occur), PCI bridge executes a single-beat 
read. For Memory Read Multiple, PCI bridge sets the byte enables to Os, indicating a variable length 
burst. 


The PCI target can be programmed to treat Memory Reads as Memory Read Line commands or 
Memory Read Multiple commands in terms of PLB read behavior. 


The PCI bridge guarantees the PCI initial target latency requirement by retrying the PCI cycle if read 
data is not immediately available in the read buffer. Subsequent latency is programmable using 
PCICO_BRDGOPT2[STLD]. 


The PCI bridge master latency timer can limit the length of read bursts using 
PCICO_BRDGOPT1[MLTC]. The timer limits the duration of a burst to the programmed value in units 
of PLB clock cycles. 
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Read Buffer 


The PCI bridge read buffer stores all read data (including delayed read and prefetched data) when the 
data is received from the PLB, before it is passed to the PCI. The 96-byte read buffer can store one 
transaction. 


Delayed Reads 


A delayed read is queued if a PCI master requests a read while PCI master writes are posted. Posted 
writes are completed on the PLB before the read is run. PCI bridge continues to post PCI master 
writes (if buffer space is available) while a delayed read is in progress. Such writes complete on the 
PLB after the read, even though they complete on the PCI before the read. 


A delayed read is also queued if data is not immediately available in the read buffer and a delayed 
read does not already exist. 


When a PCI master returns for a previously requested delayed read, the data is passed out of the 
read buffer. While the PCI master accepts delayed read data, the PCI bridge can begin to prefetch 
more read data, if the PCI master posted write buffer is empty. See “Read prefetching on page 17-16 
for more details. 


Any data remaining in the read buffer after delayed read data has been passed to a PCI master is 
marked as prefetch data and discarded upon a write in either direction. 


PCI bridge can hold one delayed read transaction. PCI bridge retries all other PCI master reads until 
the delayed read completes on the PCI. The read buffer discards data from a delayed read under only 
one condition. The PCI discard timer is used to track the amount of time it takes for a PCI master to 
re-request the read. If the PCI master does not re-request the read in 2'° PCI clocks (about one 
millisecond for a 33 MHz PCI clock), PCI bridge discards the delayed read data. This timer begins 
counting at the beginning of the initial PCI cycle (delayed read request). If PCI bridge is used ina 
system on which the PLB target (memory) maximum latency (including PLB arbitration) is a 
significant portion of the timer duration, the timer can expire despite normal bus operation. One 
solution to this problem is to disable the PCI Discard Timer. 


lf a delayed read is burst terminated on the PLB (a rare occurrence), PCI bridge will not repeat the 
request until the PCI master re-requests and only then if the PCI master requests more data than is 
already buffered. 


Read Prefetching 


PCI bridge attempts to prefetch data to maximize burst throughput on PCI read requests. Read 
prefetching occurs only in response to Memory Read Multiple commands or Memory Read, if the PCI 
target is programmed to treat them as Memory Read Multiple (Memory Read Line causes prefetching 
to the next word boundary only). This prefetch buffer is 96 bytes. 


If a PC] master reads from the read buffer while a PLB read is in progress, data is passed to PCI as it 
is being filled from the PLB. If the read buffer goes empty long enough for the PCI subsequent latency 
timer to expire, the PCI is target disconnected. If the read buffer fills up, the PLB cycle is master 
terminated. The bridge PLB master will not attempt to reacquire the PLB bus if its posted write buffer 
is not empty. 


Prefetched data is discarded if a write is accepted from either the PLB or the PCI. A PC! master read 
that misses the prefetch buffer also causes current read data lo be discarded and the new request to 
be serviced. 
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Byte Enable Handling 


PCI byte enables are treated as don’t cares for PCI reads. The PCI bridge performs doubleword burst 
or single-beat doubleword reads on the PLB, regardless of the byte enables presented by the 
requesting PCI master. 


Note: This rule assumes that all PLB memory is prefetchable and that all PLB memory accesses are 
nondestructive. 


17.4.2.3 Handling Writes from PCI Masters 


PCI bridge responds to Memory Write and Memory Write and Invalidate commands. All PCI master 
writes are posted. A 64-byte write buffer is used for this purpose. The write buffer accepts up to two 
separate PCI write transactions. Two single-beat writes, one burst write, or a combination of a single- 
beat and a burst writes can be posted. If the write buffer is full, new writes are retried until buffer 
space becomes available. 


Note: The maximum of two posted transactions is as viewed from the PC! master. The number of 
writes performed on the PLB can be more than two, depending on the setting of byte enables 
of write burst data. See “Byte Enable Handling” on page 17-17. 


The PCI bridge begins a PLB write request as soon as a PCI master write has completed on the PCI 
bus, or a bursting PC! master has written at least six words of data. The PCI bridge continues to 
receive data from a bursting PCI master as it transfers data to the PLB. If the write post buffer fills, the 
PCI master is target disconnected. If the write post buffer empties, the PLB cycle is master 
terminated. 


Writes are executed in the same order they are received. 


Byte Enable Handling 


The PLB does not support non-contiguous byte enables, whereas the PCI bus does. The PLB 
supports the use of byte enables only for non-line, non-burst transactions, whereas the PCI bus 
supports any combination of byte enables for any data phase. Therefore, when a PCI master presents 
a data phase without all byte enables asserted, the bridge disconnects and treats that data phase as 
one or two single-beat writes on PLB, depending on whether or not byte enables are non-contiguous. 


Masters presenting writes without all byte enables asserted experience degraded performance. 


17.4.2.4 Miscellaneous 
The PCI target forces single-beat transfers when reserved burst or cache line wrap order is used. 


The PCI target causes master abort of reserved command encodings, and does not respond to I/O, 
interrupt acknowledge, or special cycle commands. 


The PLB master does not abort requests. 
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17.4.3 Completion Ordering 

PCI bridge implements the following completion ordering rules: 

1. PCI master writes are accepted if there is room in the PCI write post buffer. 

2. New PCI master reads are accepted if there is no delayed read (DRR or DRC) in progress: 


a. If PC! write post buffer is empty and read data is not buffered, then begin a delayed read (enter 
DRR state). 


b. lf PCI write post buffer is not empty, then begin delayed read (enter DRR state). 
Delayed reads are handled as follows: 


a. While in DRR state, retry all PCl master reads. Wait for all PC] master writes if any that were 
posted before entering DRR state to complete on PLB. 


b. Execute PLB read, enter DRC state. 


c. While in DRC state, retry all PCI master reads if the address does not match. If it does match, 
pass the read data to the PCI master. If data is passed, exit the DRC state. 


3. PLB master writes are accepted if there is room in the PLB write post buffer. 


4. PLB master reads are accepted if the PLB write post buffer and the PCI write post buffer are both 
empty. 


17.4.3.1 PCI Producer-Consumer Model 


The PCI Producer-Consumer model is followed with one exception: PCI master reads do not flush 
PLB writes and PC] master writes do not cause PLB prefetched read data to be discarded. If the “flag” 
is stored in system memory (PLB side), but the “data” is stored in a PCI target, the control! software 
must manually force coherency. This can be done by following two rules: 


1. To ensure data written by a PLB master has reached the intended PCI target, the PLB master 
should execute a read from PCI, to any nondestructive address. This is only necessary if the write 
is postable. 


2. To ensure data read by a PLB master is current (rather than old prefetched data), the PLB master 
should execute a read from PCI to any other nondestructive address. This is only necessary if the 
read is prefetchable. 


17.4.4 Collision Resolution 


The PCI bridge must resolve collisions when a PLB master and a PCI master attempt accesses 
through the PCI bridge at the same time. Table 17-7 summarizes collision resolution. 


In general, PLB postable writes are always accepted (if buffer space is available), and passed to the 
PCI when given the chance. PCI master writes are always accepted (if buffer space is available), but 
cause PLB reads and non-postable writes to be rearbitrated to clear the path to the PLB. PLB reads 
and non-postable writes proceed as long as there is no PCI master activity, which causes the PLB 
cycle to be rearbitrated. PCI master reads are always allowed to proceed, and cause PLB reads and 
non-postable writes to be rearbitrated. 


Internal configuration accesses have their own rules. Configuration writes are not allowed to complete 
while any write data is posted in the PCI bridge, or while the PCI master is prefetching. Otherwise, 
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there are no restrictions. Configuration reads have no restrictions; however, only one internal 
configuration access (PLB or PCI side) may be serviced at a time. 


Table 17-7. Collision Resolution 


PLB Non-postable 
Access Type PLB Read from PCI | PLB Postable Write to PCI Write to PCI 
PCI Write to PLB Rearbitrate PLB master | No conflict Rearbitrate PLB master 
(reads flush writes) 


PCI Read from PLB Rearbitrate PLB master | No conflict Rearbitrate PLB master 


17.5 PCI Bridge Configuration Registers 


The PCI bridge has two sets of configuration registers for configuring the bridge, handling errors, and 
reporting status. Local configuration registers control PLB functions, and are accessed only from the 
PLB. The PCI configuration registers control PCI functions, and can be accessed from the PLB and 
the PCI. In addition, the mechanism used to access the bridge configuration registers may also be 
used to configure other devices on the PCI bus. 


17.5.1 PCI Bridge Register Summary 


Table 17-8 provides a summary of all of the PCI bridge registers. The registers are discussed in detail 
in the following sections. See Chapter 8, “Reset and Initialization,” for register reset values. 


Table 17-8. Directly Accessed MMIO Registers 


[Resister [Address [Access [Description [Page| 
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Table 17-9. PCl Configuration Address and Data Registers 


PCICO_CFGADDR O0xEECO0000 PCI Configuration Address Register 
PCICO_CFGDATA OxEEC00004 PCI Configuration Data Register 


Table 17-10. PCI Configuration Register Offsets 


[POCO_VENDID | ox0T=0x00 | _RIW | A |PCIVendoriD SSS 
FPCICO_DEVID___[0x03-Ox0a | RAW | _R_[PCIDevesIDSSCSCS~S 
POI Command Register 


PCICO_REVID PCI Revision ID 

PCICO_PCICLS Ox0B-0x09 | R/W | -R_ | PCI Class Register 

PCICO_CACHELS foxoc = | ORT CR OY PCI Cache Line Size 

PCICO_LATTIM PCI Latency Timer 

PCICO_HDTYPE foxoE | ORT CRC PCI Header Type 

PCICO_BIST [OoxoOF =| R | R_ |[PCIBuilt In Self Test Control 

Reserved PCI BAR 0x13-0x10 | R | R_ | Reserved, PCI BAR 

PCICO_PTMiBAR 0x17-0x14 PCI PTM 1 BAR 

PCICO_PTM2BAR 0x1B-0x18 PCI PTM 2 BAR 

Reserved PCI BAR 0x1F-0x1C Reserved PCI BAR. Refer to PC/ Specification, 
Version 2.2 for more information on values. 

Reserved PCI BAR 0x23-0x20 Reserved PCI BAR. Refer to PC/ Specification, 
Version 2.2 for more information on values. 

Reserved PCI BAR 0x27-0x24 Reserved PCI BAR. Refer to PC! Specification, 
Version 2.2 for more information on values. 

Reserved Cardbus Ox2B-—0x28 Reserved Cardbus CIS Pointer. Refer to PC/ 

CIS Pointer Specification, Version 2.2 for more information on 
values. 

PCICO_SBSYSVID Ox2D-0x2C | R/W | FR _ | PCI Subsystem Vendor ID 

PCICO_SBSYSID Ox2F-0x2E | R/W: | R_ | PCI Subsystem ID 

Reserved Exp ROM -| Ox33-—0x30 Reserved Expansion ROM Base Address. Refer 

Base Addr to PCI Specification, Version 2.2 for more 
information on values. 


PCICO_CAP____—ioxaa_— | R_|_A_[PCICapabilties Pointer «SY 
[Reseed «(OBOE [RA [Resened ——SSCSC~S~*S 
PPCICOINTIN [ogo RAW | AW [PCIinterupttine ——SSSCSC~* 
[PCICO_INTPN [oxo [RA _[_R_[POlinteuptPin———SSCSC~S 
PPCICOMINGNT ——_[ox9E [| _R_[PCIMinimum Grant ———SSCSC~* 
[PCICO_MAXLINGY _[ox9F [AR _| _R_[PCIMaximumtateney——SS—*” 
fPoIcoPcics [ota |_RAV| RW [PCIinterupt ConivolSias 
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Table 17-10. PC! Configuration Register Offsets (continued) 


[POIGT_ERREN [oa Brora 
DxaF-Dra 
[PCICO_PLOBESAT ——[oxse-0=0 | AW |_AIW” [PLB Save Evor Syndromet 
[POICO-PLBBEAR | Ox57-0x64 | RIN] RIW [PLB Slave Evor Address Regiiar 
FROIco-CaPID_—_—[x68___|_A_| A Gapabiy ener 
oa 

}PCICO_PMC =} Ox5B-Ox5A | R | R__ | Power Management Capabilities 


mis 
Ox5D-0x5C Power Management Control Status 
[POICo_PuOSRESE [ose [A | _F_| 
|PCICO_DATA ss fOxSF | OR | OR 


PCICO_PMSCRR Power Management State Change Request 
Register 


17.5.2 PCI Bridge Local Configuration Registers 


The PCI bridge local configuration registers have fixed addresses in PLB space and must be 
accessed using single beat PLB read or write cycles of the same size as shown in the register 
descriptions. 


Failure to access all bytes of a particular register could produce unexpected results. Reading of 
reserved bit locations produces unpredictable values. Software must use appropriate masks to 
extract the desired bits. Writes must preserve the values of reserved bit positions by first reading the 
register, merging the new value, and writing the result. 


17.5.2.1 PMM 0 Local Address Register (PCILO_PMMOLA) 


PCILO_PMMOLA defines the PLB starting address of range 0 in PLB space that is mapped to PCI 
memory. Only bits that are 1 in the PCILO_PMMOMA are used to determine the starting address; all 
other bits are don’t cares. Only bits 31:12 are writable. Bits 11:0 are always 0. 


WLA 


31 12/11 0 


Figure 17-7. PMM 0 Local Address Register (PCILO_PMMOLA) 


31:12 Writable PLB Local Address 
pi:0 | | PLB Local Address Always 0 
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17.5.2.2 PMM 0 Mask/Attribute Register (PCILO_PMMOMA) 


PCILO_PMMOMA controls the size and attributes of the PLB space mapped to PCI memory for 
range 0. 


MASK ENA 


Figure 17-8. PMM 0 Mask/Attribute Register (PCILO_PMMOMA) 


31:12 | MASK The mask bits determine the size of the The mask must be of the form 111....0000. 
address map range. Bits set to 1 cause the corresponding 
PCILO_PMMOLA bits to be compared with 
incoming PLB addresses. Note that the 
minimum range size is 4KB, and valid 
ranges are powers of 2. For example, a 
128MB range would be encoded as 
OxF8000 and a 4KB range would be 
. encoded as all ones. 


je eee Reserved Returns 0 when read. 


Read Prefetching Enable If read prefetch is enabled, the PCI bridge 

1 Read prefetching is enabled. prefetches 64 bytes from PCI memory in 
response to a PLB single-beat, byte-burst, 
or half word burst read from PMM 0. 


PLB to PCI Memory Mapping Enable Note that PCILO_PMMOLA, 

1 Memory mapping is enabled. PCILO_PMMOPCIHA, and 
PCILO_PMMOPCILA must be initialized 
before enabling. 


17.5.2.3 PMM 0 PCI Low Address Register (PCILO_PMMOPCILA) 


PCILO_PMMOPCILA defines the low-order 32 bits of the PCI address generated in response to a PLB 
access to range 0. Only bits that are 1 in PCILO_PMMOMA are passed to the PCI address. The other 
(least significant) bits of the PCI address are passed through from the PLB address. Only bits 31:12 
are writable. Bits 11:0 are always 0. 
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WLA 


Figure 17-9. PMM 0 PCI Low Address Register (PCILO_PMMOPCILA) 


31:12 | WLA Writable PCI Low Address 
P40 | | PC! Low Address Always 0 


17.5.2.4 PMM 0 PCI High Address Register (PCILO_PMMOPCIHA) 


PCILO_PMMOPCIHA defines the high-order 32 bits of the PCI address generated in response to a 
PLB access to range 0. If PCILO_PMMOPCIHA is greater than 0, the PCI bridge generates a PCI dual 
address cycle using the value in PCILO_PMMOPCIHA as the high-order 32 bits of the PCI address. 


ow 
= 
oO 


Figure 17-10. PMM 0 High Address Register (PCILO_PMMOPCIHA) 


31:0 as, PCI High Address 


17.5.2.5 PMM 1 Local Address Register (PCILO_PMM1LA) 


PCILO_PMM1LA defines the PLB starting address of range 1 in PLB space that is mapped to PCI 
memory. See “PMM 0 Local Address Register (PCILO_PMMOLA)” on page 17-21. 


(ee) 
— 
Oo 


Figure 17-11. PMM 1 Local Address Register (PCILO_PMM1LA) 


31:0 al PLB Local Address 
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17.5.2.6 PMM 1 Mask/Attribute Register (PCILO_PMM1MA) 


PCILO_PMM1MaA defines the size and attributes of range 1 in PLB space that is mapped to PCI 
memory. See “PMM 0 Mask/Attribute Register (PCILO_PMMOMA)” on page 17-22. 


MASK ENA 


Figure 17-12. PMM 1 Mask/Attribute Register (PCILO_PMM1MA) 


31:12 | MASK | The mask bits determine the size of the The mask must be of the form 111....0000. 
address map range. Bits set to 1 cause the corresponding 

PCILO_PMM1LA bits to be compared with 
incoming PLB addresses. Note that the 
minimum range size is 4KB, and valid 
ranges are powers of 2. For example, a 
128MB range would be encoded as 
OxF8000 and a 4KB range would be 
encoded as 0x11111. 


P14:2 [ee Reserved Returns 0 when read. 


1 Read Prefetching Enable If read prefetch is enabled, the PC! bridge 
1 Read prefetching is enabled. prefetches 64 bytes from PCI memory in 
, response to a PLB single-beat, byte-burst, 
or half word burst read from PMM 0. 


ENA PLB to PCI Memory Mapping Enable. Note that PCILO_PMM1LA, 
1 Memory mapping is enabled. PCILO_PMM1PCIHA, and 
PCILO_PMM1PCILA must be initialized 
before enabling. 


17.5.2.7 PMM 1 PCI Low Address Register (PCILO_PMM1PCILA) 


PCILO_PMM1PCILA defines the low-order 32 bits of the PCI address generated in response to a PLB 
access to range 1. See “PMM 0 PCI Low Address Register (PCILO_PMMOPCILA)” on page 17-22. 


31 0 


Figure 17-13. PMM 1 PCI Low Address Register (PCILO_PMM1 PCILA) 


31:0 aa PCI Low Address 
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17.5.2.8 PMM 1 PCI High Address Register (PCILO_PMM1PCIHA) 


PCILO_PMM1PCIHA defines the high-order 32 bits of the PC! address generated in response to a 
PLB access to range 1. See “PMM 0 PCI High Address Register (PCILO_PMMOPCIHA)” on 
page 17-23. 


Figure 17-14. PMM 0 High Address Register (PCILO_PMMOPCIHA) 


31:0 | | PCI High Address 


17.5.2.9 PMM 2 Local Address Register (PCILO_PMM2LA) 


PCILO_PMM2LA defines the PLB starting address of range 2 in PLB space that is mapped to PCI 
memory. See “PMM 0 Local Address Register (PCILO_PMMOLA)” on page 17-21. 


Figure 17-15. PMM 2 Local Address Register (PCILO_PMM2LA) 


31:0 eS ool PLB Local Address 


17.5.2.10 PMM 2 Mask/Attribute Register (PCILO_PMM2MA) 


PCILO_PMM2MA defines the size and attributes of range 2 in PLB space that is mapped to PCI 
memory. See “PMM 0 Mask/Attribute Register (PCILO_PMMOMA)” on page 17-22. 
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MASK ’ ENA 


Figure 17-16. PMM 2 Mask/Attribute Register (PCILO_PMM2MA) 


31:12 | MASK | The mask bits determine the size of the The mask must be of the form 111....0000. 
address map range. Bits set to 1 cause the corresponding 

PCILO_PMM2LA bits to be compared with 
incoming PLB addresses. Note that the 
minimum range size is 4KB, and valid 
ranges are powers of 2. For example, a 
128MB range would be encoded as 
OxF8000 and a 4KB range would be 
encoded as 0x11111. 


Reserved - Returns 0 when read. 


Read Prefetching Enable If read prefetch is enabled, the PCI bridge 

1 Read prefetching is enabled. prefetches 64 bytes from PCI memory in 
response to a PLB single-beat, byte-burst, 
or half word burst read from PMM 0. 


PLB to PCI Memory Mapping Enable Note that PCILO_PMM2LA, 

1 Memory mapping is enabled. PCILO_PMM2PCIHA, and 
PCILO_PMM2PCILA must be initialized 
before enabling. 


17.5.2.11 PMM 2 PCI Low Address Register (PCILO_PMM2PCILA) 


PCILO_PMM2PCILA defines the low-order 32 bits of the PC] address generated in response to a PLB 
access to range 2. See “PMM 0 PCI Low Address Register (PCILO_PMMOPCILA)” on page 17-22. 


31 0 


Figure 17-17. PMM 2 Low Address Register (PCILO_PMM2PCILA) 


31:0 Pl PCI Low Address 
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17.5.2.12 PMM 2 PCI High Address Register (PCILO_PMM2PCIHA) 


PCILO_PMM2PCIHA defines the high-order 32 bits of the PCI address generated in response to PLB 
access to range 2. See “PMM 0 PCI High Address Register (PCILO_PMMOPCIHA)” on page 17-23. 


Figure 17-18. PMM 2 PCI High Address Register (PCILO_PMM2PCIHA) 


31:0 Pl PCI High Address 


17.5.2.13 PTM 1 Memory Size/Attribute Register (PCILO_PTM1MS) 


PCILO_PTM1MS defines the size and attributes of the of PCI memory region mapped to local (PLB) 
space through PTM 1. PCILO_PTM1MS affects the operation of PCI PTM 1 BAR. 


SIZE 


31 12} 11 1] 0] 


Figure 17-19. PTM 1 Memory Size/Attribute Register (PCILO_PTM1MS) 


MASK 
[tit ee 


17.5.2.14 PTM 1 Local Address Register (PCILO_PTM1LA) 


PCILO_PTM1LA defines the local (PLB) address that is generated in response to a PCI access to 
local (PLB) space through PTM 1. Only bits that are 1 in PCILO_PTM1MS are passed to the PLB 
address. The other (least significant) bits of the PLB address are passed through from the PCI 
address. Only bits 31:12 are writable. Bits 11:0 are always 0. 


Defines the size of the region of PCI The minimum range size is 4KB. Valid 
memory space that is mapped to local ranges are always a power of 2. 
(PLB) space using PTM 1. For example, a value of OxFFOO0000 
indicates that the region contains 16MB. 


Reserved Returns 0 when read. 


Determines if range 1 is enabled to map 
PCI memory space to PLB space. 
Always 1 (enabled). 
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WLA 


31 12/11 0 


Figure 17-20. PTM 2 Local Address Register (PCILO_PTM1LA) 


31:12 | WLA | Writable PTM 1 Local Address _Writable 
Pit:0 | | PTM 1 Local Address Always 0 


17.5.2.15 PTM 2 Memory Size/Attribute Register (PCILO_PTM2MS) 


PCILO_PTM2MS defines the size of the region of PCI memory space mapped to local (PLB) space 
through PTM 2. 


SIZE 


Defines the size of the region of PCI The minimum range size is 4KB. Valid 

memory space mapped to local (PLB) ranges are always a power of 2. 

space using PTM 2. For example, a value of OxFF000000 
indicates that the region contains 16MB. 


Defines the size of the region of PCI The minimum range size is 4KB. Valid 

memory space mapped to local (PLB) ranges are always a power of 2. 

space using PTM 2. For example, a value of OxFFO00000 
indicates that the region contains 16MB. 


Determines if range 2 is enabled to map When EMM is disabled, PCICO_PTM2BAR 
PCI memory space to PLB space. cannot be written. Set PCICO_PTM2BAR 
to 0 before disabling EMM. 


17.5.2.16 PTM 2 Local Address Register (PCILO_PTM2LA) 


This register defines the local (PLB) address generated in response to a PCI access to local (PLB) 
space through PTM 2. See “PTM 1 Local Address Register (PCILO_PTM1LA)” on page 17-27 for 
more information. 
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Figure 17-22. PTM 2 Local Address Register (PCILO_PTM2LA) 


31:0 oil PTM 2 Local Address 


17.5.3 PCl Configuration Registers 
The PCI configuration registers can be accessed from both the PLB and PCI buses. 


PLB side configuration is supported using the mechanism defined in the PC/ Local Bus Specification 
Version 2.2. This mechanism uses PCICO_CFGADDR and PCICO_CFGDATA to access the 
configuration registers indirectly. These registers reside at addresses OxEECO0000 and 
OxEEC00004, respectively. 


To access (from the PLB side) the configuration space of other devices on the PCI bus, write a value 
to PCICO_CFGADDR that specifies the following: 


e Bus number 
e Device number on that bus 
e Register number to be accessed 


The value must also set PCICO_CFGADDRIEN] = 1. An access to PCICO_CFGDATA then results ina 
configuration cycle on the PCI bus. 


To access the bridge configuration registers from the PLB side, use the same mechanism as 
described above, but set PCICO_CFGADDR[BN, DN] = 0. The bridge is assumed to reside on PCI 
bus 0 and to have a device number of 0. 


The bridge configuration registers can be accessed from the PCI side by Type 0 configuration reads 
or writes, with the PCIIDSel pin asserted to the bridge. There are some restrictions on PCI side 
accesses that are noted in the register descriptions that follow. 


PCICO_CFGADDR and CONFIG_DATA should be accessed with single-beat PLB commands. All 
registers are byte addressable. Reading of reserved bit locations produces unpredictable values. 
Software must use appropriate masks to extract the desired bits. Writes must preserve the values of 
reserved bit positions by first reading the register, merging the new value, and writing the result. 


17.5.3.1 PCl Configuration Address Register (PCICO_CFGADDR) 


PCICO_CFGADDR controls the type of cycle generated when PCICO_CFGDATA is accessed. Its 
fields are shown in Figure 17-23. 
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Enable 
0 Disabled 
1 Enabled 


Function Number 
Register Number 


See the PC/ Local Bus Specification Version 2.2 for details about how the fields are used. 


17.5.3.2 PCI Configuration Data Register (PCICO_CFGDATA) 


Accessing PCICO_CFGDATA causes one of three things to happen, depending on the value of 
PCICO_CFGADDR. 


1. Generation of a Type 0 configuration cycle on the PC! bus (PCICO_CFGADDRIBN] =0, 
PCICO_CFGADDRIDN] > 0). 


2. Generation of a Type 1 configuration cycle on the PCI bus (PCICO_CFGADDRIBN] > 0). ~ 
3. Access of a PCI bridge PCI configuration register (PCICO_CFGADDRIBN, DN] = 0). 
Figure 17-24 illustrates the PCICO_CFGDATA register. 


Figure 17-24. PCI Configuration Data Register (PCICO_CFGDATA) 


31:0 [eces = Configuration Data , 
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17.5.3.3 PCI Vendor ID Register (PCICO_VENDID) 


PCICO_VENDID identifies the manufacturer of a PCI device. This register contains 0x1014 (index 
0x00 = 0x14, index 0x01 = 0x10) at reset. This vendor ID is assigned for all IBM PCI devices. The 
local CPU (PLB master) can write a different value to this register. 


Figure 17-25. PCI Vendor ID Register (PCICO_VENDID) 


15:0 l= = ai Vendor ID 


17.5.3.4 PCI Device ID Register (PCICO_DEVID) 


PCICO_DEVID identifies the PCI device. This value is 0x0156 (index 0x03 = 0x01, index 0x02 = 0x56) 
at reset. The local CPU (PLB master) can write a different value to this register. 


Figure 17-26. PCI Device ID Register (PCICO_DEVID) 


15:0 a PCI Device ID 


17.5.3.5 PC] Command Register (PCICO_CMD) 
PCICO_CMD controls the operation of the PCI bridge on the PCI bus. Figure 17-27 describes the bits. 
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FBB AS PS SC MA 


oo 


SE PER MWI ME_ IOA 
Figure 17-27. PCl Command Register (PCICO_CMD) 


Fast Back-to-Back Write Enable Enables PCI! masters to perform fast back- 
to-back transactions. Because he PCI 
bridge does not perform fast back-to-back 
transactions; FBB is read-only and returns 
0 when read. 


PCISErr Enable Enables driving PCISErr when a PCI bus 

0 Disabled parity error is detected when the PCI 

1 Enabled bridge is the PCI target. PCICO_CMD[PER] 
must be enabled for address parity errors. 
PCICO_CMD[PER] and 
PCICO_ERREN[WDPE] must be enabled 
for write data parity errors. 


Address stepping wait states. The PCI bridge does not address step 
(except for address stepping when 
generating a Config Type 0 cycle); AS is 
read-only and returns 0 when read. 


Parity error response This bit is enabled for all types of PCI bus 
0 Disabled parity errors, including the following: 
1 Enabled ¢ PCI data bus parity errors while PCI is 
master. 
¢ PCI data bus parity errors while PCI is 
target. 
¢ PCI address bus parity errors. 
When parity error response is disabled, 
detection of these errors is masked and 
PCIPErr (PERR#) is not asserted, although 
parity is still generated. 


Palette Snooping Enable special palette snooping. 
The PC! bridge is not a VGA device; PS is 
read-only and returns 0 when read 


Memory Write and Invalidate Enable The PCI bridge does not generate this 
command; MWI is read-only and returns 0 
when read. 


Special Cycle Operations Enable . The PCI bridge never monitors special 
cycles; SC is read-only and returns 0 when 
read. 
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Master Enable Enables PCI bridge-to-master cycles on 

0 Disabled the PCI bus. When ME is 0, the PCI bridge 

1 Enabled only responds as a PLB slave to 
PCICO_CFGADDR, PCICO_CFGDATA, 
and PCI bridge local configuration register 
access. Except for configuration cycles, the 
PCI bridge cannot master cycles to the PCI 
bus. If the pin strapping setting reflected in 
CPCO_PSR{RL] = 1, ME resets to 1. 


Memory Access Controls PCI bridge response as a PCI 
0 Disabled memory target. MA is disabled at reset. 
1 Enabled 


/O Access Controls the PCI bridge response as a PCI 
/O target. The PCI bridge does not 
respond to I/O space accesses; IOA is 
read-only and returns O when read. 


17.5.3.6 PCI Status Register (PCICO_STATUS) 


PCICO_STATUS is a read/bit-reset register used to record status information for PCI bus events. Bits 
in PCICO_STATUS are set only as a result of specific events occurring on the PCI bus. They are reset 
by writing a 1 to the desired bit. Writing a 0 to a bit location leaves that bit unchanged. 


DEPE RMA STA DST FBBC 66C 


[15/14/13] 12/41/40 9] 8] 7] 6] S$] 4} SO 


SSE RTA DPE UDFS CL 


Figure 17-28. PCI Status Register (PCICO_STATUS) 


Detected Parity Error The PCI bridge sets DEPE when the PCI 
Write 1 to clear. bridge detects a PCI bus parity error, 
regardless of the setting of any enable bits 
(DEPE is non-maskable). 
The following events set DEPE: 
e PCI address bus parity error detected 
when PCI bridge is a target. 
¢ PCI data bus parity error detected when 


a PCI master writes to PLB memory 
(PCI bridge is the target). 

¢ PCI data bus parity error detected when 
PCI bridge masters a PCI read cycle. 


Signaled System Error The PCI bridge sets SSE if the PCI bridge 

Write 1 to clear. asserts PCISErr (see “Error Handling” on 
page 17-55 for causes of PCISErr 
assertion). 
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Received Master Abort 
Write 1 to clear. 


Received Target Abort 
Write 1 to clear. 


Signaled Target Abort 
Write 1 to clear. 


PCIDevSel Response Timing 
Read-only. 


Data Parity Error Detected 
Write 1 to clear. 


Fast Back-to-Back Capable 


Read-only; returns 0 when read. 


UDF Supported 


Read-only; returns 0 when read. 


66 MHz Capable 
O At reset 


1 PCI bridge is configured for 66MHz 


operation. 


Capabilities List 


The PCI bridge sets RTA when a PCI cycle 
for which the PCI bridge is the master is 
terminated with master abort. 


The PCI bridge sets RTA when a PCI cycle 
for which it is the master is terminated with 
target abort. 


The PCI bridge sets STA when a PCI cycle 
for which it is the target is terminated with 
target abort. 


The PCI bridge asserts PCIDevSel on the 
second clock after PCiFframe is asserted 
(called medium response time). 
Read-only; always returns 0b01 when 
read. 


DPE is set when the following conditions 

are met: 

¢ The PCI bridge detects a data parity 
error (PCIPErr is asserted) when the PCI 
bridge is the master on a PCI read cycle, 
or is the master when it samples 


PCIPErr asserted on a PCI write cycle. 
PCICO_CMD[PER] = 1. 


Indicates that the PCI target can accept 
fast back-to-back transactions when the 
transactions are not to the same agent. 
The PCI bridge target does not accept this 
type of fast back-to-back transaction. 


Indicates device support of user-definable 
features. The PCI bridge does not support 


.user-definable features. 


Indicates that the device can run at 66 
MHz. The PCI bridge can be configured to 
run at 33 MHz max or 66 MHz. The local 
CPU (PLB master) sets 66C to 1 if PCI 
bridge is configured for 66 MHz operation. 


Indicates that the value at offset 0x34 is a 


This bit is read only and returns 1 when pointer in configuration space to a linked 
read. list of new capabilities. 


oe Reserved These bits return Os when read. 


17.5.3.7 PCI Revision ID Register (PCICO_REVID) 


PCICO_REVID holds the current incremental revision number. The reset value is the version number 
of the PCI bridge macro (first version is 00). However, the local CPU (PLB master) can write a value to 
this register. 


17-34 PPC405GP User’s Manual Preliminary 


Figure 17-29. PCI Revision ID Register (PCICO_REVID) 


[70 | | Revision ID Revision level of device. 


17.5.3.8 PCI Class Register (PCICO_CLS) 


This register holds the class code. This register is Ox060000 at reset, which indicates that the PCI 
bridge is a bridge device located between the PLB and the PCI bus; however, the local CPU (PLB 
master) can write a value to this register for the case where PCI bridge is not the host bridge. 


Class information is defined in the PC/ Local Bus Specification, Version 2.2. 


BASE INT 


SUB 


Reset to 0x06, which indicates bridge 
device. 

Users of the RISCWatch debugger must 
use the PCICO_BASECC register to 
access this field. 


Reset to 00, which indicates host bridge. 


Users of the RISCWatch debugger must 
use the PCICO_SUBCLS registerto ~ 
access this field. 


Reset to 00. 

Users of the RISCWatch debugger must 
use the PCICO_INTCLS register to access 
this field. 


17.5.3.9 PCI Cache Line Size Register (PCICO_CACHELS) 


PCICO_CACHELS determines the size of a PCI cache line. PCI bridge does not support a PCI cache. 
Therefore, this register is read-only and returns 0x00 when read. 
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Figure 17-31. PCI Cache Line Size Register (PCICO_CACHELS) 


[70 | | PCI Cache Line Size 


17.5.3.10 PCI Latency Timer Register (PCICO_LATTIM) 


PCICO_LATTIM holds the value of the PCI latency timer. The granularity of the latency timer is 8 PCI 
cycles. Therefore, the 3 low-order bits of this register are read-only and return Ox111. 


Figure 17-32. PCl Latency Timer Register (PCICO_LATTIM) 


oT [retawneytmer 


PCI Local Bus Specification Version 2.2 specifies that PCI masters capable of multi-beat bursts must, 
after losing their PCI grant, get off the bus after a number of clock cycles equivalent to the value in 
PCICO_LATTIM. 


The actual number of clock cycles to disconnect varies somewhat when in asynchronous mode. If 
PCICO_LATTIM is programmed in asynchronous mode to a value that is less than 64, the PCI bridge 
PCI master interface could timeout, regardless of the state of its grant line. 


In asynchronous mode, the PCI master starts its timer and can timeout regardless of the state of the 
PCI grant. This is strictly a performance issue and does not limit functionality or affect data integrity. 


Several factors affect the frequency of timeouts. 


¢ The amount of PCI bus traffic. In moderate to heavily loaded systems, this is less of an issue 
because a PCI master tends to lose its grant more often after gaining the bus. 


¢ Fast targets that introduce few or no wait states reduce the chances of timeouts occurring. 


17.5.3.11 PC! Header Type Register (PCICO_HDTYPE) 


PCICO_HDTYPE (bits 0:6) identifies the second part of the PCI header, which begins at offset 0x10. It 
also determines whether a device contains multiple functions (bit 7). The PCI bridge implements the 
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standard header and is not a multi-function device; therefore, PCICO_HDTYPE is read-only and 
returns 0x00 when read. 


Figure 17-33. PCl Header Type Register (PCICO_HDTYPE) 


[re [Raiteaaeros 


17.5.3.12 PCI Built-In Self Test (BIST) Control Register (PCICO_BIST) 


PCICO_BIST is used for control and status of BIST. PCI bridge does not implement BIST. PCIBIST is 
read-only and returns 0x00 when read. 


Figure 17-34. PCI Built-in Self Test Control Register (PCICO_BIST) 


(2 Proesrent 


17.5.3.13 Unused PCI Base Address Register Space 


PCI! base address register space is defined to begin at offset 0x10; however, the first 32 bits of this 
space are unused by PCI bridge, and the defined base address registers begin at offset 0x14. 


17.5.3.14 PCI PTM 1 BAR (PCICO_PTM1BAR) 


PCICO_PTM1BAR defines a space in PCI memory space mapped to PLB space (system memory or 
ROM). 
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BAZ MSI 


Figure 17-35. PCI PTM 1 BAR Register (PCICO_PTM1BAR) 


31:12 | BA Base Address Only corresponding bits in PCILO_PTM1MS 
These bits determine where in PCI memory _ that are set to 1 are writable. Bits in 
address space this region is located. PCILO_PTM1MS that are set to 0 cause 

the corresponding Base Address register 
bits to be always 0. PCILO_PTM1MS must 
: be initialized by a PLB master before any 
PCI device is allowed to configure this 
register. 


Base Address Always Zero BAZ = 0x00 because the minimum size of 


this range is 4KB. 


3 PF Prefetchable PR = 1 to indicate that prefetching is 
allowed. 

2:1 LT Location Type LT = 0b00 to indicate that the memory 
space can be located anywhere in the 32- 
bit address space. 

MSI Memory Space Indicator MSI = 0 to indicate memory space, rather 
than I/O space. 


17.5.3.15 PCI PTM 2 BAR (PCICO_PTM2BAR) 


PCICO_PTM2BAR defines a second space in PCI memory space that is mapped to PLB space 
(system memory or ROM). Note that if PCICO_PTM2BAR is disabled using PCILO_PTM2MSA, 
PCICO_PTM2BAR cannot be written. Set PCICO_PTM2BAR to 0 before disabling this bit. If disabled 
in this way, reads to PCICO_PTM2BAR always return 0. , 
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Base Address Only corresponding bits in 


These bits determine where in PCI PCILO_PTM2MS that are set to 1 are 
Memory address space this region is writable. Bits in PCILO_PTM2MS that 
located. are set to 0 cause the corresponding 


Base Address register bits to be always 


Figure 17-36. PC! PTM 2 BAR Register (PCICO_PTM2BAR) 
0. PCILO_PTM2MS must be initialized 
by a PLB master before any PCI device 


31:12 | BA 
can configure this register. 


11:4 BAZ Base Address Always Zero BAZ = 0x00 because the minimum size 
of this range is 4KB. 

3 PF Prefetchable PF = 1 to indicate that prefetching is 
allowed. 

2:1 LT Location Type LT = 0b00 to indicate that the memory 
space can be located anywhere in the 
32-bit address space. 

0 MSI Memory Space Indicator MSI = 0 to indicate memory space, 

rather than I/O space. 


17.5.3.16 PCl Subsystem Vendor ID Register (PCICO_SBSYSVID) 
PCICO_SBSYSVID holds the vendor ID for a subsystem or add-in board. 


15 0 


Figure 17-37. PCI Subsystem Vendor ID Register (PCICO_SBSYSVID) 


15:0 | | PCI Subsystem Vendor ID 


17.5.3.17 PCl Subsystem ID Register (PCICO_SBSYSID) 
PCICO_SBSYSID holds the device ID of a subsystem or add-in board. 
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Figure 17-38. PCI Subsystem ID Register (PCICO_SBSYSID) 


15:0 tel PCI Subsystem ID 


17.5.3.18 PCI Capabilities Pointer (PCICO_CAP) 


PCICO_CAP contains an 8-bit pointer in configuration space to the next capability. This data structure 
is indicated by PCIC)_STATUS[CL]. PCICO_CAP points to the first item in the list of capabilities at 
address offset 0x58, which is the PCI power management capability structure. 


Figure 17-39. PCI Capabilities Pointer (PCICO_CAP) 


7:0 eee al PCI Capabilities Pointer 


17.5.3.19 PCI Interrupt Line Register (PCICO_INTLN) 


PCICO_INTLN contains interrupt line routing information. 


~“I 
(fo) 


Figure 17-40. PCI Interrupt Line Register (PCICO_INTLN) 


- | 7:0 [, - PCI Interrupt Line 
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17.5.3.20 PCI Interrupt Pin Register (PCICO_INTPN) 
PCICO_INTPN specifies the PCI interrupt line that the device uses. The value 0x01 indicates INTA#. 


Figure 17-41. PCI Interrupt Pin Register (PCICO_INTPN) 


ro [ [Potente 


17.5.3.21 PCI Minimum Grant Register (PCICO_MINGNT) 


PCICO_MINGNT specifies the burst period length of a PCI device. PCICO_MINGNT is read-only and 
returns 0x00 when read. 


Figure 17-42. PCI Minimum Grant Register (PCICO_MINGNT) 


a 


17.5.3.22 PCl Maximum Latency Register (PCICO_MAXLTNCY) 


PCICO_MAXLTNCY specifies how often a PCI device needs to access to the PCI bus. 
PCICO_MAXLTNCY is read-only and returns 0x00 when read. 


Figure 17-43. PCl Maximum Latency Register (PCICO_MAXLTNCY) 


70 | | PCI Maximum Latency 
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17.5.3.23 PCI Interrupt Control/Status Register (PCICO_ICS) 


A PLB master or a PCI master device may generate an interrupt to the PCI bus by writing a 1 to bit 0. 
Clearing this bit clears the interrupt. Bit 0 also reports the status of the interrupt. A value of 1 means 
that the interrupt is asserted, a value of O means that the interrupt is deasserted. 


Figure 17-44. PCI Interrupt Control/Status Register 


Reserved These bits return O when read. 


[7:1 Ee Reserved These bits return Owhenresd, 
Asset PCI interrupt When software sets this bit, the PCI bridge 


asserts its Interrupt pin. 


17.5.3.24 Error Enable Register (PCICO_ERREN) 


ERREN enables detection and reporting of various errors for the PCI bridge (see “Error Handling” on 
page 17-55). 


TAEE MEDE WDPE 


MERE MEAE MAEE 


Figure 17-45. Error Enable Register (PCICO_ERREN) 
| Reserved 


Target Abort Error Enable While the PCI bridge is the PCI master, 
0 Disabled this bit enables the detection of a target 
1 Enabled abort as an error condition. If TAEE is 
enabled, the PCI bridge reports PLB bus 
errors. 
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PLB Bus Error Response Enable 

00 No action is taken. 

01 The PCI target should drive PCISErr on 
the PCI bus. 

10 Target should target abort the offending 
read. 

11 Indicates the PCI target should drive 
PCISErr and target abort. 


PLB Master Error Detection Enable 


0 Disables detection of PLB master errors. 


1 Enables detection of PLB master errors. 


PLB Bus Error Assertion Enable 
0 Disabled 
1 Enabled 


Write Data Parity PCISErr Enable 
0 Disabled 
1 Enabled. 


Master Abort Error Enable 
0 Disabled 
1 Enabled 


MERE controls the response taken by the 

PCI bridge on the PCI bus (as the PCI 

target) when PLB bus errors are asserted 

to the PCI bridge PLB master. 

Note: Only reads can be target aborted. 

Note: Modes 10 and 11 cannot be used in 
asynchronous mode. 


MEDE enables the detection of PLB bus 
errors when the PCI bridge is a PLB 
master. 


MEAE enables the reporting of a PLB bus 
error when the PCI bridge is a PLB slave. 


The PCI bridge drives PCISErr when a 
data parity error is detected on a write 
cycle when the PCI bridge is the PCI 
target. PCICO_CMD[SE] must also be 1. 


MAEE enables the detection of a master 
abort as an error condition when the PCI 
bridge is the master. The PCI bridge drives 
SI_MErr on the PLB bus in response to a 
master abort. If this bit is disabled, driving 
of Sl_Merr in response to master abort is 
masked. 


17.5.3.25 Error Status Register (PCICO_ERRSTS) 


PCICO_ERRSTS contains status for detected error conditions (see “Error Handling”’on page 17-55). 
Bits in PCICO_LERRSTS can be set to 1 only as the result of a system error. Writinga1 toa 
PCICO_ERRSTS bit clears the bit. Writing a 0 to a bit leaves that bit unchanged. 


MED WDPE 


SARME MEAE PUR 


Figure 17-46. Error Status Register (PCICO_ERRSTS) 


a 


4 SARME | PCISErr Asserted on Received PLB Bus Set when PCI bridge asserts PCISErr on 
Error the PCI bus in response to PCI bridge 
receiving a PLB bus error while PLB 
master. 
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PLB Bus Error Detected 
1 Error detected 


PLB Bus Error Assertion Event 
1 An PCI bridge error, which can cause a 
PLB bus error, occurred. 


PCISerr on Write Data Parity Error 


PLB Unsupported Request 


Set when a PLB bus error signal is 
asserted when PCI bridge is the PLB 
master. MED is set regardless of whether 
the PCI bridge is enabled to treat this as an 
error condition (the setting of MED is not 
maskable). 


Set when an error occurs that would cause 
PCI bridge (as PLB slave) to assert a PLB 
bus error signal. MEAE is set regardless of 
whether the the PLB bus error assertion is 
enabled (the setting of MEAE is not 
maskable). 


Set when the PCI bridge drives PCISErr in 
response to a data parity error detected on 
a PCI write to PLB memory. PCIPErr is 
also driven. 


Set when the PCI bridge is a PLB slave 
and detects an unsupported request from 
a PLB master to an address range that PCI 
bridge decodes. The PCI bridge allows 
such requests to time out. 


17.5.3.26 Bridge Options 1 Register (PCICO_BRDGOPT1) 


PCICO_BRDGOPT1 controls various operating parameters of the PCI bridge. The parameters must 
be initialized before PCI masters access the PCI bridge. 


PLMTCR PRP PAPM APLRM 


AS BT P43] 247] 0) 


PLESE PGMAE PTMRCI 


Figure 17-47. Bridge Options 1 Register (PCICO_BRDGOPT1) 


15:8 PMLTCR | PLB Master Latency Timer Count Register PMLTCR contains the value used by the 
PLB master to load its latency timer. The 
granularity of this timer is 16 PLB cycles; 
therefore, the low-order bits of this 

register are read-only and are hardwired 
to 1. : 


7 PLESE PLB Lock Error Status Enable PLESE controls the handling of slave 
0 Slave error locking is disabled. 
1 Slave error locking is enabled. 


error locking. 
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PLB Request Priority PRP controls the request priority for PLB 
11 Highest accesses. 

10 Next highest 

01 Next highest 

00 Lowest 


PLB Guarded Memory Access Enable PGMAE controls whether PLB accesses 
0 Bridge PLB master memory accesses are guarded or unguarded. 

are unguarded. 
1 Bridge PLB master memory accesses 

are guarded. 


PCI Arbiter Park Mode PAPB defines how the internal PCI arbiter 
0 The arbiter parks on requester 0 (the handles bus parking. 

bridge PCI master). 
1 The arbiter parks on the last master 


granted the bus. 


2:1 PTMRCI | PCI Target Memory Read Command PTMRCI enables the PCI bridge to be 
Interpretation forced to treat a PCI memory read as a 
00 Memory Read memory read multiple, or as a memory 
01 Memory Read Line read line, with respect to the burst size 
10 Memory Read Multiples implied by the read commands. This is for 
11 Reserved masters that use memory read for multiple 
beat bursts. 


APLRM_ | Atomic PLB Line Read Mode APLRM controls the behavior of the 
0 bridge PLB slave with respect to PLB line 
1 PLB slave asserts Addrack and begins = reads. APLRM must not be se t to 1 
its data tenure immediately after the PC] _unless all PCI target devices can 
master receives the first read data word. guarantee no disconnects for PLB line 


reads. 


17.5.3.27 PLB Slave Error Syndrome Register 0 (PCICO_PLBBESRO) 


PCICO_PLBBESRO stores information about errors reported by the PCI bridge PLB slave. There are 
four groups of errors, one each for PLB masters 0-3. PCICO_PLBBESRO[MxET] fields (x represents 
a particular PLB master ID) contain information about the type of error. PCI parity errors set 
PCICO_PLBBESRO[MxET] to 0b001. Master and target aborts set PCICO_PLBBESRO[MxET] to 
0b101 (non-configured bank error). The PCICO_PLBBESRO[MxRWS] fields show whether the 
transaction causing the error was a read or write. 


Each error field can be locked by PCICO_PLBBESRO[MxFL], which is set by a PLB lock error signal to 
the bridge PLB slave. If the PCICO_PLBBESRO[MxFL] field associated with a master is 0, the PLB 
lock error signal is driven high to the bridge PLB slave, and an error associated with that master 
occurs. The error is then reported, and PCICO_PLBBESRO[MxFL] is set. Subsequent errors do not 
set PCICO_PLBBESRO fields for that master until PCICO_PLBBESRO[MxFL] is cleared. If 
PCICO_PLBBESRO[MxFL] = 0, and the PLB lock error signal is low, the error is reported, and 
PCICO_PLBBESRO[MxFL] is not set. Additional errors are also reported. Only software can clear 
PCICO_PLBBESRO[MxFL]. 


Writing 1 to a PCICO_PLBBESRO field clears the field. 
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MoET MOFL MIET- MIiFL M2ET M2FL M3ET MS3FL 


at Pees Ae ees Tw s|epy 


MORWS MOAL MiRWS M1AL M2RWS M2AL M3RWS M3AL 


Master 0 Error Type 
000 No Error 

001 Parity Error 
010 Reserved 

011 Reserved 

100 Reserved 

101 Non-configured Bank Error 
110 Reserved 

111 Reserved 


See PCICO_PLBBESRO[MOET] © 


Figure 17-48. PLB Slave Error Syndrome Register 0 (PCICO_PLBBESRO) 
MORWS | Master 0 Read/Write Status 
0 Error operation was a write 
1 Error operation was a read 
27 MOFL Master 0 PCICO_PLBBESRO Field Lock 
0 PCICO_PLBB ESRO unlocked 
MOAL Master 0 PCICO_PLBBEAR Address Lock 
0 PCICO_PLBBEAR unlocked by Master 0 
1 PCICO_PLBBEAR locked by Master 0 
22 M1RWS | Master 1 Read/Write Status 
O Error operation was a write 
1 Error operation was a read 
21 M1FL Master 1 PCICO_PLBBESRO Field Lock 
0 PCICO_PLBB ESRO unlocked 
20 M1AL Master 1 PCICO_PLBBEAR Address Lock 
0 PCICO_PLBBEAR unlocked by Master 1 
: 1 PCICO_PLBBEAR locked by Master 1 
| 16 M2RWS | Master 2 Read/Write Status 
O Error operation was a write 
1 Error operation was a read 
15 M2FL Master 2 PCICO_PLBBESRO Field Lock 
0 PCICO_PLBB ESRO unlocked 
14 M2AL Master 2 PCICO_PLBBEAR Address Lock 
0 PCICO_PLBBEAR unlocked by Master 2 
1 PCICO_PLBBEAR locked by Master 2 


31:29 | MOET 
1 PCICO_PLBB ESRO locked 
25:23 | M1ET Master 1 Error Type 
1 PCICO_PLBB ESRO locked 
19:17 | M2ET Master 2 Error Type See PCICO_PLBBESRO[MOET] 
1 PCICO_PLBB ESRO locked 
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13:11 | M8ET Master 3 Error Type See PCICO_PLBBESRO[MOET] 


M3RWS | Master 3 Read/Write Status 
0 Error operation was a write 
1 Error operation was a read 


M3FL Master 3 PCICO_PLBBESRO Field Lock 
0 PCICO_PLBBESRO unlocked 
1 PCICO_PLBBESRO locked 


M3AL Master 3 PCICO_PLBBEAR Address Lock 
0 PCICO_PLBBEAR Unlocked by Master 2 
1 PCICO_PLBBEAR Locked by Master 2 


Th 


17.5.3.28 PLB Slave Error Syndrome Register 1 (PCICO_PLBBESR1) 


PCICO_PLBBESR1 stores information about errors reported by the bridge PLB slave. There are four 
groups of errors, one each for PLB masters 4—7. See “PLB Slave Error Syndrome Register 0 
(PCICO_PLBBESRO)” on page 17-45 for additional information about the fields of this register. 


Only software can clear PCICO_PLBBESR1[MxFL]. The PCICO_PLBBESR1[MxAL] fields control the 
and PCICO_PLBBESRO and PCICO_PLBBESR71 in the same way. Writing a 1 to a field of the 
PCICO_PLBBESRx clears the bit. 


M4ET M4FL MS5ET M5FL M6ET M6FL M7ET M7FL 


Si PRS AAA Mas Wysley7 


M4RWS M4AL M5RWS MS5AL M6RWS M6AL M7RWS M7AL 


Figure 17-49. PLB Slave Error Syndrome 1 (PCICO_PLBBESR1) 


31:29 | M4ET Master 4 Error Type 

000 No Error 

001 Parity Error 

010 Reserved 

011 Reserved 

100 Reserved 

101 Non-configured Bank Error 
110 Reserved 

111 Reserved 


28 M4RWS | Master 4 Read/Write Status 
0 Write error operation 
1 Read error operation 
27 M4F Master 4 PCICO_PLBBESR1 Field Lock 
0 PCICO_PLBBESR1 unlocked 
1 PCICO_PLBBESR1 locked 
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Master 4 PCICO_PLBBEAR Address Lock 
0 PCICO_PLBBEAR unlocked by Master 4 


26 M4AL 
1 PCICO_PLBBEAR locked by Master 4 


25:23 | MSET Master 5 Error Type See PCICO_PLBBESR1[M4ET] 


22 MS5RWS | Master 5 Read/Write Status 
0 Write error operation 
1 Read error operation 
M5FL Master 5 PCICO_PLBBESR1 Field Lock 


1 PCICO_PLBBESR1 Locked 


Master 5 PCICO_PLBBEAR Address Lock 
0 PCICO_PLBBEAR unlocked by Master 5 
1 PCICO_PLBBEAR locked by Master 5 


0 PCICO_PLBBESR1 Unlocked 
MS5AL 


M6ET | Master 6 Error Type See PCICO_PLBBESR1[M4ET] 
M6RWS | Master 6 Read/Write Status 
0 Write error operation 
1 Read error operation 
15 M6FL Master 6 PCICO_PLBBESRi Field Lock 
1 PCICO_PLBBESR1 locked 
Master 6 PCICO_PLBBEAR Address Lock 
0 PCICO_PLBBEAR unlocked by Master 6 
13:11 | M7ET | Master 7 Error Type See PCICO_PLBBESR1[M4ET] 
10 M7RWS | Master 7 Read/Write Status 
0 Write error operation 
1 Read error operation 
M7FL Master 7 PCICO_PLBB ESRi Field Lock 
0 PCICO_PLBBESR1 unlocked 
1 PCICO_PLBBESR1 locked 
0 PCICO_PLBBEAR unlocked by Master 7 
1 PCICO_PLBBEAR locked by Master 7 
Reserved 
17.5.3.29 PLB Slave Error Address Register (PCICO_PLBBEAR) 
PCICO_PLBBEAR contains addresses associated with errors, as indicated by the PLB slave 
asserting SI_MErr for transactions initiated by the PCI bridge on the PCI bus. PCICO_PLBBEAR is 


0 PCICO_PLBBESA1 unlocked 
14 M6AL 
1 PCICO_PLBBEAR locked by Master 6 
ie M7AL Master 7 PCICO_PLBBEAR Address Lock 
read-only. 
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Figure 17-50. PLB Slave Error Address Register (PCICO_PLBBEAR) 


31:0 | | PLB Slave Error Address 


17.5.3.30 Capability Identifier (PCICO_CAPID) 


When PCICO_CAPID contains 0x01, the PCI bridge supports power management and the data 
structure currently being pointed to is the PC! power management capability structure. 


Figure 17-51. Capability Identifier (PCICO_CAPID) 


0 | | PCI Capability Identifier 


a 


17.5.3.31 Next Item Pointer (PCICO_NEXTIPTR) 


PCICO_NEXTIPTR describes the location of the next item in the capability list of the function. 
PCICO_NEXTIPTR is set to 0x00 to indicate that this is the last item on the capability list. 


a] 
oO 


Figure 17-52. Next Item Pointer (PCICO_NEXTIPTR) 


7:0 al PCI Next Item Pointer 
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17.5.3.32 Power Management Capabilities (PCICO_PMC) 


PCICO_PMC provides information about the capabilities of the function related to power 
management. A value of 0x0202 indicates no specific capabilities. 


PMES 


DiS DSI 


VERS 


D2s AUXCUR 


is TOP ys s}2 


PMECLK 


Figure 17-53. Power Management Capabilities Register (PCICO_PMC) 


15:11. | PMES PME Support 

10 D2S D2 Support 
Determines if the D2 power management 
state is supported. 

DiS D1 Support 

Determines if the D1 power management 
state is supported. 

ae AUXCUR | Auxiliary Current Support 


Device Specific Initialization 
0 after reset 


| Reserved 


oi PMECLK 
7 


The PCI bridge does not support PME#; 
therefore, PMES is hardwired to Ob00000. 


The PCI bridge does not support the D2 
power management state; therefore, D2S 
is hardwired to 0. 


The PCI bridge supports the D1 power 
management state; therefore, D1S is 
hardwired to 1. 


The PCI bridge does not support 
Aux_Current; therefore, AUXCUR is 
hardwired to O0b000. 


This bit indicates whether special 
initialization of this function is required 
(beyond the standard PCI configuration 
header) before the generic class device 
driver is able to use it. 


Always read as 0. 


This bit is hardwired to 0 indicating that 
the function does not support PME# 
generation in any state. 


Returns 0b010 on reads, indicating that 
PMC complies with Revision 1.1 of PC/ 
Power Management Interface 
Specification. 


17.5.3.33 Power Management Control/Status Register (PCICO_PMCSR) 


PCICO_PMCSR is used to manage the PCI power management state and to enable and monitor 


PMEs. 


17-50 PPC405GP User's Manual 


Preliminary 


PMEST DSEL PSTAT 


Mela el eT OT 


DSCAL PMEEN 


Figure 17-54. Power Management Control/Status Register (PCICO_PMCSR) 


ie i fee] The PCI bridge does not support PME#; 
therefore, PMEST is hardwired to 0. 


14: ces baal The PCI bridge does not support data 
register; therefore, DSCAL is hardwired to 
Ob00. 
DSEL The PCI bridge does not support a data 
register; therefore, DSEL is hardwired to 
Ob0000. 


The PCI bridge does not support PME 
generation; therefore, PMEEN is hardwired 


to 0. 
7:2 fas Reserved - Returns 0 when read. 


1:0 PSTAT | Determine the current power state of a If software attempts to write a value for an 
function and sets the function into a new unsupported power state to PSTAT, its value 
power state. does not change. Writing this fiield may 
00 DO change PCIO_PMSCRR. 

01 D1 
10 D2 
11 D3 Hot 


17.5.3.34 PMCSR PCl-to-PCI Bridge Support Extensions (PCICO_PMCSRBSE) 


PCICO_PMCSRBSE is required for all PCI-to-PCl bridges. The PCI bridge in not a PCl-to-PCl bridge; 
therefore, it returns O when this register is read. 


Figure 17-55. PMCSR PCI to PCI Bridge Support Extensions (PCICO_PMCSRBSE) 


70 | | PCI to PCI Bridge Support Extensions 
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17.5.3.35 PCI Data Register (PCICO_DATA) 


PCICO_DATA is an optional register that provides a mechanism for the function to report state 
dependent operating data such as power consumed or heat dissipation. The PCI bridge does not 
implement this register; therefore, it returns 0 when this register is read. 


Figure 17-56. PCI Data (PCICO_DATA) 


Ee ee eS 


17.5.3.36 Bridge Options 2 Register (PCICO_BRDGOPT2) 
PCICO_BRDGOPT2 controls various operating parameters of the PCI bridge. 


PSSTLD 


17-52 


DPR 


EWPCI 


PSTLTD 


Reserved 


External Write to PCI Command Interrupt 

0 No write to PCICO_CMD has occurred. 

1 External PC! master has written to 
PCICO_CMD. 


Drive PCI Reset 
0 Normal operation 
1 Causes PCiReset pin to be asserted. 


Subsequent Target Latency Timer Duration 
Specifies the number of PCI clocks that a 
PCI master burst can be held in a wait 
state before a target disconnect is initiated. 
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Software can also set or clear this bit. 


Software that asserts this bit must leave is 
asserted long enough to guarantee the 
PCI pulse width requirements. DPR does 
not reset PLB bus interface registers or 
PCI bridge registers. 

PClReset is also asserted when the PCI 
bridge is reset. 


Only set on reads. 

In synchronous mode, PSSLTD equals the 
maximum number of PCI clocks to 
disconnect. In asynchronous mode, 
PSSLTD plus 3 equals the maximum 
number of PCI clocks to disconnect. The 
asynchronous value must be 2 or less. 


Preliminary 


Reserved 


PCI Discard Timer Disable When enabled, the PCI bridge never 
0 Disabled discards delayed read data. 


se 
2 PTDT 
P| 1 Enabled 


a 


i” Host Configuration Enable HCE controls host PCI access to the PCI 


0 Disabled bridge configuration registers. All host 
1 Enabled attempts to access the PCI bridge PCI 

In synchronous mode, the PCI subsequent target latency timer duration equals the maximum number 

of PCI clocks to disconnect. In asynchronous mode, PCI subsequent target latency timer duration 


configuration registers are retried. This 
give the local CPU (PLB master) time to 

plus 3 equals the maximum number of PCI clocks to disconnect. The asynchronous value must be 2 

or less. 


initialize them before the host sees them. 
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17.5.3.37 Power Management State Change Request Register (PCICO_PMSCRR) 


PCICO_PMSCRR provides a method of informing the local processor of a power management state 
change request and prevents the completion of the write to PCICO_PMCSR until the local processor 
indicates it is ready for the state change. All writes to PCICO_PMCSR are retried until the local 
processor sets PCICO_PMSCRR[APW] = 1. PCICO_PMSCRR is used with the registers in the 
capability structure for power management. Descriptions of each bit are shown in Figure 17-58. 


SCR DWE 


APW REQST 


Figure 17-58. Power Management State Change Request Register (PCICO_PMSCRR) 


72 Reserved Always read as 0. 


Accept PMCIO_PCMSR Writes The local processor sets APW when the 

State Change Request The PCI bridge sets SCR when a host 
writes PCICO_PMCSR to request a power 
management state change. This drives an 
interrupt to the local processor informing it 
of a state change request. The local 
processor must simultaneously clear SCR 
and set APW = 1 when the local processor 

is ready to change the state. After SCR is 

cleared, new requests are not detected 
until the outstanding delayed write is 
accepted. The local processor can set 
SCR = 1. Note that any host side write to 
any byte (0x5C-Ox5F) is considered a 
power state change request 


Always 1 if DWE is 0. local processor is ready to change the 
REQST | Request State Indicates the new power management 
__ State requested by a delayed host write to 
PCICO_PMCSR. This field is read-only 
from the PLB side 


power management state. APW is cleared 
Delayed Write Enable When DWE is set to 1, any configuration 
0 Immediate write write to the PCICO_PMCSR is completed 
1 Delayed write as a delayed write. All writes to 
PCICO_PMCSR are retried until the local 
processor sets the “Accept PCICO_PMCSR 
Write bit” (bit 4). When 0, any configuration 
write to the PCICO_PMCSR is completed 
immediately. DWE is a don’t care if a host 
write to PCICO_PMCSR requests a state 
change from D3hot to DO. 


when the host configuration writes to the 
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PCICO_PMCSR register is accepted. The 
local processor can write 0 to APW. 


17.6 Error Handling 


The PCI bridge detects and reports several types of errors, which are reported to the PLB or the PCI. 
Status information is saved in the configuration registers to enable error type determination. 


All errors are associated with either a cycle on the PLB or a cycle on the PC! bus. 


Each error that can be detected is associated with a mask. If the mask is set, detection of that error 
condition is disabled. There are also masks for the PCISErr, PCIPErr, and PLB bus error signals that 
prevent reporting of any error by these signals. The masks do not prevent error detection. 


The error types are as follows: 


e PLB unsupported transfer type 

¢ PCI master abort generated (while PCI master) 
¢ PCI target abort received (while PCI master) 

e PCI target data bus parity error detection 

¢ PCI master data bus parity error detection 

¢ PCI target address parity error detection 

¢ PLB bus error detection 


The following sections describe in detail how these errors are generated, what actions are taken for 
each, and how to reset a given error. 


17.6.1 PLB Unsupported Transfer Type 


This error occurs when the bridge PLB slave encounters an unsupported PLB transfer type. 
Table 17-11 outlines transfers not supported by the bridge PLB slave. 


Table 17-11. PLB Unsupported Transfer Types 


Upon detection of this error, the bridge sets PCICO_LERRSTS[PUR] = 1. 


17.6.2 PCI Master Abort 


This error is generated by the bridge PCI master when no target responds with PCIDevSel within the 
required time-out window and error detection is enabled. The bridge PLB slave may assert a PLB bus 
error signal on the PLB in response to this error, as explained below. 


Two masks are associated with a PCI master abort. PCICO_ERREN[MAEE] masks error reporting. If 
the error is detected, a PLB bus error signal is asserted if PCICO_ERREN[MAEE] = 1. For reads, the 
bridge PLB slave still completes the transfer on the PLB, but drives 1s on the read data bus and the 

appropriate PLB bus error signal for each data beat. For posted writes, a PLB bus error is asserted for 
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1 cycle, asynchronously to the corresponding write data beat on the PLB. For connected writes, a 
PLB bus error signal is asserted with the data transfer, and the data is discarded. If 
PCICO_ERREN[MAEE] = 0, error reporting is masked. No PLB bus error signal is asserted, 
regardless of the setting of PCICO_ERREN[MEAE]. 


The following status bits are set: 


1. If a master abort is signalled, PCICO_STATUS[RMA] = 1. Setting of this field is non-maskable. 
Writing a 1 to PCICO_STATUS[RMA] resets the field. 


2. If master abort is detected as an error, PCICO_ERREN[MEAE] is set to 1 to indicate an event that 
would cause a PLB bus error to be asserted by the bridge PLB slave, regardless of the setting of 
PCICO_ERREN[MEAE]. This field can be reset by writing a 1 to PCICO_ERREN[MEAE]. 


3. PCICO_PLBBEAR and PCICO_PLBBESRx are updated as follows: 


The address of the aborted request is saved in PCICO_PLBBEAR if all 
PCICO_PLBBESRx[MxAL] = 0 (PCICO_PLBBEAR is unlocked). If all 

PCICO_PLBBESRx[MxFL] = 0, PCICO_PLBBESRx[MxET] = 0b101 to indicate a non-configured 
bank error; and PCICO_PLBBESRx[MxRWS] is set to 0 on a write, 1 on a read. If 
PCICO_ERREN([MAEE] = 0 or PCICO_ERREN[MEAE] = 0, no PCICO_PLBBEAR or 
PCICO_PLBBESRx update is performed. 


17.6.3 Bridge PCI Master Receives Target Abort While PCI Bus Master 


This error is generated when the bridge PCI master receives a target abort while mastering a cycle on 
the PCi bus. Upon detection of this error, the bridge PLB slave may assert a PLB bus error signal on 
the PLB in response to this error, as explained below. . 


Two masks are associated with a target abort. PCICO_ERREN[TAEE] masks error reporting. If the 
error is detected, a PLB bus error signal is asserted if PCICO_ERREN[TAEE] = 1. For reads, the 
bridge PLB slave still completes the transfer on the PLB and drives the appropriate PLB bus error line 
for each data beat (note that for line reads, a PLB bus error signal is asserted for all data beats). For 
posted writes, if PCICO_ERREN[TAEE] = 1, the bridge PLB slave asserts a PLB bus error for 1 cycle, 
asynchronously to the corresponding write data beat on the PLB. For connected writes, a PLB bus 
error signal is asserted with the data transfer, and the data is discarded. If PCICO_ERREN[TAEE] = 0, . 
error reporting is masked No PLB bus error signal is asserted, regardless of the setting of 
PCICO_ERREN[MEAE]. If prefetching is occurring when a target abort is received, data preceding the 
target abort is kept in a prefetch buffer. 
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The following status bits are set: 


1. lf a target abort is received, PCICO_STATUS[RTA] = 1. Setting this field is non-maskable. Writing a 
1 to PCICO_STATUS[RTA] clears the field. 


2. If a target abort is detected as an error, PCICO_ERRSTS[MEAE] = 1 to indicate an event that 
would cause the bridge PLB slave to assert a PLB bus error signal, regardless of the setting of 
PCICO_ERREN[MEAE]. Writing a 1 to PCICO_LERRSTS[MEAE] resets the field. 


3. PCICO_PLBBEAR and PCICO_PLBBESRx are updated as follows: 


The address of the aborted request is saved in PCICO_PLBBEAR if all 
PCICO_PLBBESRx[MxAL] = 1 (PCICO_PLBBEAR is unlocked). If all 
PCICO_PLBBESRx[MxFL] = 1, PCICO_PLBBESRx(MxET] = 0b101 to indicate a nonconfigured 
bank error, and PCICO_PLBBESRx[MxRWS] is set to 0 on a write, or to 1 on a read. If 
PCICO_ERREN[MAEE] = 0 or PCICO_ERREN[MEAE] = 0, no PCICO_PLBBEAR or 
PCICO_PLBBESRx update is performed. 


17.6.4 PCI Target Data Bus Parity Error Detection 


This error is generated when the bridge PCI target detects a data bus parity error on write data froma 
PCI master doing a write cycle to PLB memory. PCI uses even parity. 


Setting PCICO_CMD[PER] = 0 masks this error. 
The following status bits are set: 


1. PCICO_STATUS[DEPE] = 1 to indicate a PC! bus parity error. Setting this field is non-maskable. 
Writing a 1 to PCICO_STATUS[DEPE] clears the field. 


2. PCICO_STATUS[SSE] = 1 if PCICO_LERREN[WDPE] = 1. Writing a 1 to PCICO_STATUS[SSE] 
clears the field. 


3. PCICO_ERRSTS[WDPE] = 1 if PCICO_ERREN[WDPE] = 1. Writing a 1 to PCICO_STATUS[SSE] 
clears the field. 


17.6.5 PCI Master Data Bus Parity Error Detection 


This error is generated when a data bus parity error is detected on the PCI bus during a cycle 
mastered by the bridge PCI master. The bridge PCI master checks parity on read cycles and samples 
PCIPErr on write cycles. The bridge PCI master may assert PCIPErr if the master detects a parity 
error on a read. PCI uses even parity. 


Setting PCICO_CMD[PER] = 0 masks this error. PCICO_STATUS[DEPE] = 1. If a parity error is 
detected, writing a 1 to PCICO_STATUS[DEPE] = 1 clears the field. 


lf PCICO_ERREN[MEAE] = 1 and the error is detected as described, the PLB slave asserts a PLB 
error signal on the PLB in response to the error. For reads, a PLB bus error is asserted for each data 
beat in which bad parity was detected. For writes, a PLB bus error is asserted for each data beat in 
which bad parity was detected, but asynchronously to the actual transfer of write data on the PLB. 
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The following status bits are set: 


1. PCICO_STATUS[DEPE] = 1 if the bridge PC! master detects bad parity on read data, regardless of 
the state of PCIO_CMD[PER]. Writing a 1 to PCICO_STATUS[DEPE] clears the field. 


2. If a data bus parity error is detected as an error, PCICO_ERRSTS[MEAE] = 1 to indicate an event 
that would cause a PLB bus error signal to be asserted by the bridge PLB slave, regardless of the 
state of PCICO_ERREN[MEAE]. Writing a 1 to PCICO_ERRSTS[MEAE] = 1 clears the field. 


3. PCICO_PLBBEAR and the PCICO_PLBBESRx are updated as follows: 


The address of the PCI transaction where parity errors occurred is saved in the PCICO_PLBBEAR. 
PCICO_PLBBEAR is set if all PCICO_PLBBESRx[MxAL] = 1 (PCICO_PLBBEAR is unlocked). If 
PCICO_PLBBESRx[MxFL] = 1, PCICO_PLBBESRx[MxET] = 0b001 to indicate a parity error, and 
PCICO_PLBBESRx[MxRWS] is set to 0 on a write, 1 on a read. if PCIO_CMD[PER] = 0 or 
PCICO_ERRSTS[MEAE] = 0, no PCICO_PLBBEAR or PCICO_PLBBESRx update is performed. 


Note: For clock ratios greater than 2:1 (independent of asynchronous/synchronous mode), the PCI 
bridge detects errors but does not assert a PLB bus error signal or log the error in 
PCICO_PLBBEAR, PCICO_PLBBESRx, and PCICO_ERRSTS[MEAE]. 


17.6.6 PCI Address Bus Parity Error While PCI Target 


This error occurs when a PCI address bus parity error is detected during the address phase of a cycle 
in which the bridge is the PCI target. PC! uses even parity. 


Setting PCICO_CMD[PER] = 0 masks this error. This error does not have an explicit status bit, 
however the following actions are taken: 


1. PCICO_STATUS[SSE] = 1 to indicate assertion of PCISErr, if the mask at PCICO_CMD[SE] = 1. 
Writing a 1 to PCICO_STATUS[SSE] clears the field. 


2. PCICO_STATUS[DEPE] = 1 to indicate a PCI bus parity error, regardless of the state of 
PCIO_CMD[PER]. PCICO_STATUS[DEPE] = 1 when any type of PCI pay error is detected. 
Writing a 1 to PCICO_STATUS[DEPE] clears the field. 


17.6.7 PLB Master Bus Error Detection 


This error occurs when the bridge PLB master detects a PLB bus error. If the bridge PLB master 
receives a PLB bus error while mastering a read, the master associates the error with the currently 
executing read. If the master receives a PLB bus error while mastering a write or while idle, the 
master associates the error with a write. 


PLB bus error detection is masked by PCICO_ERREN{MEDE] = 0. If PCICO_ERREN[MEDE] = 1, 
PLB bus error detection is enabled. 


PCICO_ERREN[MERE] controls the response of the bridge PCI target to PLB bus error detection. If 
PCICO_ERREN[MERE] = 10 or 11, the bridge PCI target will execute a target abort. if 
PCICO_ERREN[MERE] = 01 or 11, the bridge PCI target asserts PCISErr and allows the transaction 
to continue. If PCICO_LERREN[MERE] = 11, the bridge PCI target both target aborts and asserts 
PCISErr. 
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The following status bits are set: 


1. If the bridge PCI target executes a target abort, PCICO_STATUS[STA] = 1. The setting of 
PCICO_STATUS[STA] in such an event is non-maskable. Writing a 1 to PCICO_STATUS[STA] 
clears the field. 


2. f the bridge PCI target asserts PCISErr, PCICO_STATUS[SSE] = 1. The setting of 
PCICO_STATUS[SSE] is non-maskable. Writing a 1 to PCICO_STATUS[SSE] clears the field. 


3. If the bridge PCI target asserts PCISErr, PCICO_LERRSTS[SARME] = 1 to indicate that the bridge 
PCI target asserted PCISErr in response to a received PLB bus error signal. The setting of 
PCICO_ERRSTS[SARME] is non-maskable. Writing a 1 to PCICO_ERRSTS[SARME] clears the 
field. 


4. PCICO_ERRSTS[MED] = 1 to indicate that the bridge PLB master received a PLB bus error signal. 
Setting of PCICO_LERRSTS[MED] is non-maskable. Writing a 1 to PCICO_ERRSTS[MED] clears 
the field. 


17.7 PCI Bridge Clocking Configuration 


See “PCI Clocking” on page 7-7 for detailed information regarding the choice and setup involved with 
both synchronous and asynchronous PCI clocking modes. 


17.8 PCI Power Management Interface 


The PCI bridge supports PC/ Power Management Interface Specification Revision 1.1 (PCI-PM). 


17.8.1 Capabilities and Power Management Status and Control Registers 


The PCI bridge has a capabilities structure in the PCi configuration space that indicates that the PCI 
bridge core is PC] Power Management capable. The capabilities structure includes the following 
registers: 

¢ PCICO_CAPID, value 0x01, indicates Power Management 

¢ PCICO_NEXTIPTR, points to next capabilities structure 

¢ PCICO_PMC, value 0x0202, indicates no specific capabilities 

¢ PCICO_PMCSR, indicates hold the current PowerState 

¢ PCICO_PMCSR_BSE, value 0x00, unused in PCI-to-PClI bridge 

¢ PCICO_Data, value 0x00, not used 

¢ See “PCI Configuration Registers” on page 17-29 for details. 


17.8.2 Power State Control 


The current power management state is reported by reading PCICO_PMCSR. The PCI bridge 
supports states DO, D1, D3hot, and DScold. State D2 is not supported. When the state is not DO, the 
PCI bridge is masked from being a master or a memory or I/O target on the PCI bus. The PCI bridge 
can still be a config target. Thus, accesses claimed by the PCI bridge when in state DO are no longer 
claimed, resulting in master aborts on the PLB or PCI if such an access is attempted. Note that this 
mask is independent of the state of the PC! Command register. 
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17.8.3 Changing Power States 


The PCI bridge has two registers that control changing the power state. The host requests a change 
in the power state by writing to the PCICO_PMCSR. The other register is PCICO_PMSCRR), which 
provides a method of informing the local processor of a state change request and of preventing 
completion of the write to the PCICO_PMCSR until the local processor indicates that it is ready for the 
state change. 


Power state changes are handled as follows: 


If a host write to PCICO_PMCSR requests an unsupported state change (such as a change to D2), 
the write is accepted but is ignored (no state change occurs). 


If a host write to PCICO_PMCSR requests a change from D3hot to DO, the write is accepted. Then, 
the PCI bridge asserts the power management reset signal, which causes the entire SOC to be 
reset. 


Note: The PCI bridge assumes that any requested state change from D3hot is always to DO. 


¢ All other change requests are handled with the following sequence: 


1.The host requests a new power state by a PCI write to the PCICO_PMCSR. 
2.The host PCI write is retried (untess PCICO_PMSCRR[DWE] = 0). 


3.The host PCI write (retried or not) sets PCICO_PMSCRR[SCR] = 1, which drives an interrupt to 
the local processor. 


4.The local processor recognizes the interrupt. The local processor checks 
PCICO_PMSCRR[SCR, REQST] to determine the nature of the request. 


5.The local processor proceeds to power down the subsystem if the requested state is valid. 


6.When the subsystem has been powered down and is ready to change state, the local processor 
clears the PCICO_PMSCRR[SCR] and sets PCICO_PMSCRR[APW] = 1. 


7.When the host PCI write reoccurs: 
- Itis accepted. 
- PCICO_PMSCR is updated (only if the transition is valid). 


- PCICO_PMSCRR[APW] = 0, unless PCICO_PMSCRR[DWE] = 0, in which case 
PCICO_PMSCRR[APW] = 1 always. 


- The PCI bridge enters a new power state. 


The PCI bridge operates with the clock power management (CPM) logic to enable the bridge to be put 
into sleep mode under control of software. See Chapter 13, “Clock and Power Management” for 
discussion of the CPM function. 
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17.9 PCI Bridge Reset and Initialization 


The following sections discuss resetting and initializing the PCI bridge. 


17.9.1. Address Map Initialization 


When the PCI bridge is the PCI master, it can generate memory, I/O, configuration, interrupt 
acknowledge, and special cycles. The method of cycle generation, and the associated address 
ranges, are fixed, except for memory cycles. PCI memory cycles are generated when the PCI bridge 
detects a cycle in one of three specified PLB address ranges. The sizes and address spaces of these 
ranges are specified using the PMM registers. Also, the address of the resulting PCI memory cycle 
can be an offset from the PLB address (address translation occurs). This translation is also specified 
in the PMM registers. The PMM registers do not default to usable values following reset; they must be 
initialized before attempting to generate PCI memory cycles. 


When the PCI bridge is a target on the PCI bus, the PCI bridge can respond to memory cycles. The 
memory cycle address ranges that the PCI bridge responds to are specified in PCICO_PTM1BAR and 
PCICO_PTM2BAR. These registers are typically initialized as part of the standard PCI initialization 
process. 


Figure 17-59 shows the desired address map. System memory resides from 0x00000000-— 

OxOFFF FFFF in the CPU/PLB address space, which is accessible from the PCI in the same address 
space (PCI bridge as a memory target) as defined by PTM1/BAR1. PTM2/BAR2 is disabled in this 
example. The CPU/PLB master has two spaces in which to access PCI Memory space. Range 0 is 
0x20000000 to Ox27FFFFFF and is mapped to the same address on the PCI bus, and is 
nonprefetchable. Range 1 is Ox28000000 to Ox2BFFFFFF, and is translated to address range 
0x30000000 to Ox33FFFFFF of PCI memory space. Range 2 is disabled. 
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CPU . Memory 
(PLB) Space 


34000000 


Prefetchable 
PCI Targets 
2C000000 30000000 
28000000 28000000 
Nonprefetchable 
PCI Targets 
20000000 20000000 


10000000 10000000 


Figure 17-59. Example Address Map 
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The following register values provide the address map shown in Figure 17-59: 


Table 17-12. Address Map Register Values 


PoLerumca [| _oeoooomo [SSCS 
ee ee 
ais nated pclecingaloved 


PCILO_PMM1LA 
PCILO_PMM1MA 64MB; enabled; prefetching allowed. 


PCICO_PTM1BAR 0x00000008 PCI memory space; address decode starts at PCI 
address 0x0000 0000 


17.9.2 Other Configuration Register Initialization 


Additional register initialization is required, as follows: 


e Error handling is initially disabled (error detection is masked). If error handling is to be enabled, 
PCICO_ERREN must be initialized appropriately. 


e PCICO_BRDGOPT1 contains options for controlling the PLB. Its default values can be used. 


e PCICO_BRDGOPT2 contains options for controlling the PCI bus. Its default values assume that the 
PCI is run synchronously to the PLB, and that the PCI bridge is the primary host bridge. If the PCI 
bridge is used otherwise, the values must be changed accordingly. 


17.9.3 Target Bridge Initialization 


The PCI bridge can also respond as a configuration target; however, the PCI bridge only responds as 
a configuration target when the PCIIDSel pin is attached, rather than pulled inactive. Note that if the 
size and local address of these ranges are not strapped to desired values at reset, the local CPU 
must specify them by setting the PTM Memory Size and Local Address registers before initializing 
PCICO_PTM1BAR and PCICO_PTM2BAR. 
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The local CPU must update the following registers (if the default value is not suitable or they were not 
strapped to appropriate values at reset) before setting the Host Config Enable bit: 

¢ The address map registers (see “Address Map Initialization” on page 17-61) 

¢ PCICO_VENDID 

¢ PCICO_DEVID 

¢ PCICO_REVID 

e PCICO_CLS 

¢ PCICO_SBSYSID 

* PCICO_SBSYSVID 


17.9.4 Local Processor Boot from PCI Memory 


The PCI bridge has a mode that enables a PLB master to access a PCI memory range without initial 
configuration cycles. This mode is enabled when CPCO_PSR[RL] = 1. System designers can use this 
mode to enablea processor to access a boot ROM in PCI memory space. 


The PCI bridge comes out of reset with PMMO enabled and programmed for the address range, 
OxFFFEO000-OxFFFFFFFF. Also, PCICO_CMD[ME] = 1 after reset. Note that enabling PC! boot 
mode does not prevent subsequent updates to the PMM0 registers. 


Note: The PPC405GP allows booting from PCI memory. See Chapter 9, “Pin Strapping and Sharing” 
for more information. 


17.9.5 Type 0 Configuration Cycles for Other Devices 


Twenty-one devices can be accessed using the PCIIDSel mechanism. The PCI master asserts 1 bit 
of AD(31:11) for type 0 configuration cycles based on the value in the Device Number field. The 
mapping is as follows: 


¢ If device number is 1, AD(11) is asserted 
e If device number is 2, AD(12) is asserted 


e If device number is 21, AD(31) is asserted 


If device number contains a value of 22-31, no bit of AD(31:11) is asserted. 


17.10 Timing Diagrams 


This section contains timing diagrams of several different PCI bridge operations. The following 
paragraphs describe each diagram in detail. Each description assumes basic knowledge of PCI and 
PLB protocols. 


Each operation is shown in both synchronous and asynchronous modes. The PC! is clocked at 
33 MHz in synchronous mode and 66 MHz in asynchronous mode. The PLB is clocked at 100 MHz in 
all cases. 
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The SDRAM uses a 32-bit, PC100 memory interface configured for CAS latency of 2, command 
leadoff of 2, and RAS to CAS delay (T,,g) of 2. All memory accesses are page idle, unless indicated 
otherwise. 


Note: The PLB signals shown in the following timing diagrams are not externally accessible. They are 
included for information purposes and as an aid to understanding the PCI operations. For more 
information on these signals, refer to Processor Local Bus Architecture Specifications. 


17.10.1 PCI Timing Diagram Descriptions 


The following sections briefly describe each of the timing diagrams that follow the descriptions. Each 
description covers both the asynchronous and synchronous clocking modes for that operation. The 
timing diagrams then follow with all of the asynchronous diagrams grouped together followed by all of 
the synchronous diagrams grouped together. 


17.10.1.1 PCl Master Burst Read From SDRAM 


Figure 17-60 (asynchronous) and Figure 17-67 (synchronous) show a PCI Master executing a 128- 
byte Read Multiple from SDRAM. PCI bridge retries the initial request and performs a delayed read. 
PCI bridge executes a variable-length, doubleword read burst on PLB to SDRAM, filling its 96-byte 
read buffer. The read is a page hit. When the PCI master re-requests its read, PCI bridge begins 
bursting out of its read buffer, while continuing to prefetch from SDRAM. 


17.10.1.2 PCI Master Burst Write To SDRAM 


Figure 17-61 and Figure 17-68 show a PCI Master executing a 128-byte Write to SDRAM. PCI bridge 
accepts several beats of data into its 64-byte write buffer before executing variable-length, 
doubleword write bursts on PLB to SDRAM. The final write burst is fixed-length, since the PCI write 
has completed, and PCI bridge knows the exact burst length. 


17.10.1.3 CPU Read From PCI Memory Slave, Nonprefetching 


In Figure 17-62 and Figure 17-69, a PLB Master (CPU) executes a single-beat 64-bit read from a 
region of PCI memory marked as nonprefetchable. PCI bridge responds as a 32-bit PLB slave, so the 
CPU executes conversion cycles for each read. PCI bridge executes a single-beat PCI read for both 
PLB read requests. 


17.10.1.4 CPU Read From PCI Memory Slave, Prefetching 


In Figure 17-63 and Figure 17-70, a PLB Master (CPU) executes 8, 64-bit, single-beat reads from a 
region of PCI memory marked as prefetchable. The first PLB read causes PCI bridge to execute a 64- 
byte Read Multiple to fill its 64-byte read prefetch buffer. The data for subsequent PLB reads is. 
provided from the read buffer and no PCI cycles are generated. PCI bridge responds as a 32-bit PLB 
slave, so the CPU executes conversion cycles for each read. 


17.10.1.5 CPU Write To PCI Memory Slave 


Figure 17-64 and Figure 17-71 show a PLB Master (CPU) executing 4, 64-bit, single-beat writes to 
PCI memory. PCI bridge responds as a 32-bit slave, so the CPU executes conversion cycles for each 
write. PCI bridge posts the writes in its 4-entry write buffer, and executes a PCI single-beat Memory 
Write for each request. 
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17.10.1.6 PC] Memory To SDRAM DMA Transfer 


Figure 17-65 and Figure 17-72 show a DMA transfer of data from PCI memory to SDRAM. The DMA 
PLB Master executes a 4-doubleword read burst to PCI bridge followed by a 4-doubleword write burst 
to SDRAM. For the read, PCI bridge executes a 32-byte PCI Read Line. 


17.10.1.7 SDRAM To PCI Memory DMA Transfer 


Figure 17-66 and Figure 17-73 show a DMA transfer of data from SDRAM to PCI memory. The DMA 
PLB Master executes a 4-doubleword read burst from SDRAM followed by a 4-doubleword write burst 
to PCI memory. PCI bridge then executes a 32-byte write on the PCI bus. 

17.10.2 Asynchronous 


The following diagrams are for asynchronous clocking mode. Note that all of the diagrams flow across 
multiple pages. Each diagram begins with cycle 1 on the left facing page. 
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Figure 17-60. PCI Master Burst Read From SDRAM 
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Figure 17-60. PCI Master Burst Read From SDRAM (Continued) 
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Figure 17-60. PCI Master Burst Read From SDRAM (Continued) 
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Figure 17-60. PCI Master Burst Read From SDRAM (Continued) 
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Figure 17-61. PCI Master Burst Write To SDRAM 
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Figure 17-61. PCI Master Burst Write To SDRAM (Continued) 
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Figure 17-61. PCI Master Burst Write To SDRAM (Continued) 
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Figure 17-62. CPU Read From PCI Memory Slave, Nonprefetching 


17-76 PPC405GP User’s Manual Preliminary 


Cycles 


BEO:7 | : | pOOOOTTIT | : : 
ABus0:31 | . | , | , : : a fe 
AddrAck a ee ee ee et ee 
RdDAck 

RdDBus0:31 
RdDBus32:63 


Gnt ° : ; i : 


Pciaps1:0 [__At____X . ( 
PCIC(BE}3:0 [ he Xho 


PCIStop 


PCIDevSel 


Figure 17-62. CPU Read From PCI Memory Slave, Nonprefetching (Continued) 
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Figure 17-63. CPU Read From PCI Memory Slave, Prefetching (Continued) 
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Figure 17-63. CPU Read From PCI Memory Slave, Prefetching (Continued) 
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Figure 17-63. CPU Read From PCI Memory Slave, Prefetching (Continued) 
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Figure 17-64. CPU Write To PCI Memory Slave 
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Figure 17-64. CPU Write To PCI Memory Slave (Continued) 
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Figure 17-64. CPU Write To PC] Memory Slave (Continued) 
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Figure 17-65. PCl Memory To SDRAM DMA Transfer (Continued) 
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Figure 17-66. SDRAM To PCI Memory DMA Transfer (Continued) 
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Figure 17-66. SDRAM To PCI Memory DMA Transfer (Continued) 
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Figure 17-67. PCl Master Burst Read From SDRAM (Continued) 
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Figure 17-67. PCI Master Burst Read From SDRAM (Continued) 
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PCI Interface 


[61] 62] 63] 64] 65] 66] 67] 68169 [70] 7i [72 | 73] 74} 75176 1 77 178 179 | 80 | 


° 17-95 


17-96 


Cycles 
PLBClk 
BEO:7 
ABus0:31 


R/W 


AddrAck 


RdDAck 


RdDBus0:31 


RdDBus32:63 [) 


PCICIK 
PCIAD31:0 
PCIC[BE]3:0 
PCiFrame 
PCIIRDY 


PCITRDY 


PCIStop 


PCiIDevSel 


a) 


PPC405GP User’s Manual 


[_81| 82] 83] 84] 85 | 86 | 87] 88} 89 [90 | 91/92 | 93] 94 | 95 1 96 | 97 [98 | 99 | 100) 


Figure 17-67. 


PCI Master Burst Read From SDRAM (Continued) 


Preliminary 


| 107 104 103 104 105] 106] 104 108 109{ 110) 171} 112) 1135) 114] 115) 116} 117] 118] 119] 120 


piece LLP LLL LLP LL Ler ee eer ee 


Cycles 


BE0:7 


2 
[o) 
7) 
3 
a 
<x 


RdDBus0:31 


RdDBus32:63 


PCICIk 


PCIAD31:0 
PClFrame 


D22 D23 D24 D25 D26 D27 D28 
POIGIBEIG 07 eee ee ne es ee 


PCIIRDY 


PCITRDY 


PCiDevSel 


67. PCI Master Burst Read From SDRAM (Continued) 
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Figure 17-67. PCI Master Burst Read From SDRAM (Continued) 
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Figure 17-68. PCI Master Burst Write To SDRAM (Continued) 
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Figure 17-68. PCI Master Burst Write To SDRAM (Continued) 
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Figure 17-68. PCI Master Burst Write To SDRAM (Continued) 
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Figure 17-68. PCI Master Burst Write To SDRAM (Continued) 
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Figure 17-70. CPU Read From PCI Memory Slave, Prefetching (Continued) 
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Figure 17-71. CPU Write To PCI Memory Slave 
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Figure 17-71. CPU Write To PCI Memory Slave (Continued) 
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Figure 17-71. CPU Write To PCI Memory Slave (Continued) 
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Figure 17-71. CPU Write To PCI Memory Slave (Continued) 
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Chapter 18. Direct Memory Access Controller 


The Direct Memory Access (DMA) controller is a Processor Local Bus (PLB) and On-chip Peripheral 
Bus (OPB) master which supports the autonomous transfer of data between memory and peripherals 
and from memory-to-memory. The controller provides four DMA channels, each of which has an 
independent set of configuration registers. Each channel has its own control, source address, 
destination address, count, and scatter/gather address registers. Once these registers are 
programmed by the PPC405 processor, the DMA controller performs the requested data transfer 
without the need for processor intervention. 


The four DMA channels also support scatter/gather transfers. During a scatter/gather transfer the 
configuration registers for a particular DMA channel are automatically loaded from a data structure in 
memory instead of being individually programmed. Since the scatter/gather address register is 
updated in this process, the channel can optionally reconfigure itself for another transfer when the 
current one completes. 


As master on both the PLB and OPB the DMA controller can read and write any address accessible 
by the PPC405 processor. This includes memory and memory-mapped peripherals on the EBC 
interface, SDRAM memory and PCi addresses that have been mapped into PLB address space. The 
DMA controller can also service DMA peripherals attached to the EBC via the DMAReqn, DMAAckn 
and EOTn[TCn] I/Os, along with the OPB-attached UARTO. 


18.1 External Interface Signals 


Figure 18-1 illustrates the external I/Os associated with the DMA controller and the EBC I/Os used 
during external peripheral transfers. External peripheral and EBC device-paced memory transfers 
request service from the DMA controller by driving a DMA request line (DMAReq0-3) active. For 
peripheral mode transfers the DMA controller acknowledges the request and transfers data by 
asserting a DMA acknowledge signal (DMAAckO-3). In contrast, an EBC device-paced memory-to- 
memory transfer occurs when the chip select (PerCSn) associated with the memory location is driven 
active. The timing of PerCSn and the other EBC I/Os is determined by the Bank Access Parameter 
Register (EBCO_BnAP) for the particular memory location. See Chapter 16, “External Bus Controller’ 
for details on EBC configuration and timings. 


Table 18-1. DMA Controller External !/Os 


DMAAckn DMA Request, used to request either a peripheral mode transfer or an EBC device- 


paced memory-to-memory transfer. 


DMAAckn_ | DMA Acknowledge, instructs an EBC-attached DMA peripheral to transfer data. 
End of Transfer or Terminal Count. Used to stop the channel when programmed as 
EOTn[TCn] | EOT. When configured as TC, goes active when the channel transfer count register 


(DMAO_CTn) reaches zero. 


Note 1: The active level (polarity) of DMAReqn, DMAAckn, and EOTn{TCn] are individually 
programmable. See “DMA Polarity Configuration Register (DMAO_POL)” on page 18-5. 
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Figure 18-1. DMA Controller External Bus Control Signals 


‘18.2 Functional Overview 


As a specialized controller, the DMA unit provides system designers and programmers with a highly 
efficient method of moving data. During any DMA transfer the controller always buffers data read from 
the source prior to writing the data to the destination. Since many buses, including the internal PLB 
and the SDRAM interface, provide substantially better performance when bursting data, the DMA 
controller includes a 32-byte (4 doubleword) buffer. This buffer is enabled on a per-channel basis by 
setting DMAO_CRn/[BEN] and serves to minimize the number of discrete memory transactions. Each 
of the four DMA channels is configurable for either peripheral or memory-to-memory transfers. 


18.2.1 Peripheral Mode Transfers 


Peripherals are either devices attached to the EBC interface via the DMAReqn and DMAAckn lines, 
or the internal serial port (UARTO). Memory is any address accessible from the PLB, including PLB- 
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mapped PCI address space, SDRAM memory, and memory and memory-mapped devices on the 
peripheral bus. During a peripheral mode transfer the peripheral requests a DMA transfer by asserting 
a DMA request line. For UARTO, this signal is internal to the PPC405GP, while external peripherals 
use one of the DMAReagn lines. When the requesting channel has the highest priority of any active 
channel, the requesting device receives a DMA acknowledge. In the case of external peripherals, the 
appropriate DMAAckn line is driven to the active state, with the timing specified in the DMA Control 
Register for the channel (DMAO_CRn). 


There are two types of peripheral mode transfers: peripheral-to-memory and memory-to-peripheral. A 
peripheral-to-memory transfer reads data from a DMA device, while a memory-to-peripheral transfer 
writes data. In both cases, the peripheral interface never bursts and data is transferred at the width of 
the peripheral. If the DMA buffer is disabled for the active channel (DMAO_CRn[BEN]=0), each 
peripheral transfer causes a corresponding memory operation. 


When buffering is enabled during a peripheral-to-memory transfer, data is collected until the 32-byte 
buffer is full, the peripheral deasserts DMAReqgn, a higher priority DMA request becomes pending, or 
the channel completes. The buffer contents are then written to the target memory as efficiently as 
possible. If the initial programming of the channel's destination address register (DMAO_DAn) is 32- 
byte aligned, the buffer is emptied in one burst operation to the target memory. 


Memory-to-peripheral transfers differ since the amount of data that will be requested by the peripheral 
is unknown. If the DMA buffer is disabled (DMAO_CRn[BEN]=0) a discrete source memory read 
occurs for each element in the DMA transfer. Since this is inefficient, the buffer should only be 
disabled for low data rate transfers or when the source memory is FIFO-like, and reads are therefore 
destructive. When the 32-byte buffer is enabled the controller uses the setting in DMAO_CRn[PF] to 
prefetch 1, 2, or 4 64-bit doublewords from the source memory. The DMA controller provides data 
from the buffer until the peripheral deasserts its request, the channel is interrupted by one of higher 
priority, or the transfer completes. Whenever any of these conditions occurs any unused data in the 
DMA buffer is discarded. 


18.2.2 Memory-to-Memory Transfers 


The DMA controller can perform either device-paced (hardware-initiated) or software-initiated 
memory-to-memory transfers. Device-paced memory transfers function identically to peripheral mode 
transfers, except that a chip select (PerCSn) serves as the DMA acknowledge instead of a DMAReqn 
output. As with peripheral mode transfers, bursts never occur on the device-paced side of the 
transaction. 


Software-initiated memory-to-memory transfers between memories with fixed timings provide the 
best overall performance. During a software-initiated transfer the DMA controller knows the exact 
amount of data to be transferred. As a result, when the 32-byte DMA buffer is enabled 
(DMA0_CRn[BEN]=1) the controller uses bursts as much as possible. To ensure the highest 
bandwidth, source and destination addresses should be aligned on 32-byte boundaries. 


There are three cases that limit the ability to burst during software-initiated memory-to-memory 
transfers. Bursting is not possible from the source memory when the source address increment is 
zero (DMAO_CRn{SAI]=0). Similarly, the DMA controller does not burst to the destination when the 
destination address increment is zero (DMAO_CRn[DAI]=0). Finally, the DMA controller cannot burst 
to or from any address that maps to a device-paced (EBCO_BnAP[RE]=1) EBC chip select (PerCSn). 
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18.2.3 Scatter/Gather Transfers 


Each of the four DMA channels supports scatter/gather transfers. This scatter/gather capability allows 
the chaining of multiple DMA controller operations within a channel. During a normal DMA operation 
software must program the control, source address, destination address, and count registers for each 
transfer. Scatter/gather transfers differ in that these registers are automatically loaded from a linked 
list data structure in system memory. When a channel completes one transfer the DMA controller 
loads the next set of configuration values into the channel’s registers and the channel continues with 
the new programmings. 


18.3 Configuration and Status Registers 


Table 18-2 on page 18-4 lists the DMA configuration and status registers, each of which is accessed 
using the PowerPC mtder and mfdcr instructions. As example, the following PowerPC assembly 
code writes the control register for DMA channel 0 and then reads the DMA status register: 


#define DMAO_CRO 0x100 
#define DMAO_SR 0x120 


mtder DMAO_CRO,r3 ! write r3 to channel 0 control register 
_mfdadcr r4,DMA0_SR ! read contents of status register into r4 


The DMA configuration and status registers are readable at any time. However, since each register 
read requires a separate operation, it is not possible to guarantee that the values read from multiple 
registers correspond to a state that ever existed in the DMA controller. To illustrate, consider software 
that reads the destination address for channel 0 (DMAO_DAO) and then the count for channel 0 
(DMAO_CTO). If the DMA controller updates the count between these two operations, the values read 
differ from what is expected. 


While reads can occur at any time, software must not write the configuration registers for any channel 
that is currently enabled (DMAO_CRn[CE]=1). The only exception is that a channel! may be disabled 
by reading the channel control register, clearing the channel enabie bit, and then writing the new 
value to the control register. Once a channel is disabled, all of its configuration registers may be 
reprogrammed as desired. 


Table 18-2. DMA Controller Configuration and Status Registers 


[tineronie [DCR Address [Access] __Deseription | Page | 
io 
0x102 DMA Destination Address Register 0 
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Table 18-2. DMA Controller Configuration and Status Registers (continued) 


[Hinemonie [DOR Address [Access] Description | Page 
DMAO_DA2 0x112 DMA Destination Address Register 2 18-11 


| DMAO_CRS | 

[BNAGLCTS_[ ——oetv@—|AN[ DWI Count Ragatera [Test] 
DMA Source Address Register 3 
aE 
oes 83 
ROFL | Oras —[ RW [BWA Pity Coniston ager [16 


18.3.1 DMA Polarity Configuration Register (DMAO_POL) 


The Polarity Configuration Register (DMAO_POL) is used to set the polarity (active state) of the 
external DMA I/O signals: DMUAReqn, DMAAckn, and EOTn[TCn]. As shown in Figure 18-2, if a bit in 
DMAO_POL is zero, the corresponding signal is active high, otherwise the signal is active low. 


Whenever any of the EOT polarities are changed (DMAO_POL[EnP), software must subsequenily 
clear the corresponding EOT status bits in the DMA Status Register (DMAO_SR[TS0:3)]) prior to 
enabling the associated DMA channel. This is necessary to prevent a channel from being disabled 
because of an incorrect EOT status stored in the status bits. 


ROP EOP A1P R2P E2P A3P 


OO} 1] 218] 4] 5] 6] 7] 8] 810) 112 SS Re SE ie ea 
AOP RIP E1P A2P R3P- E3P 


Figure 18-2. DMA Polarity Configuration Register (DMA0O_POL) 
DMAReq0 Polarity 
0 DMARe¢0 is active high 
1 DMAReq0 is active low 
DMAAckO Polarity 
0 DMAACckO is active high 
1 DMAAckO is active low 


EOTO[TCO] Polarity 
0 EOTO[TCO}] is active high 
1 EOTO[TC0O] is active low 


DMAReq1 Polarity 
0 DMAReq?1 is active high 
1 DMAReq1 is active low 
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DMAAck1 Polarity 

0 DMAAck‘1 is active high 
1 DMAAck1 is active low 
EOT1[TC1] Polarity 

0 EOT1[TC1] is active high 
1 EOT1[TC1] is active low 
DMAReq2 Polarity 

0 DMAReq2 is active high 
1 DMAReq2 is active low 
DMAAck2 Polarity 

0 DMAAck2 is active high 
1 DMAAck2 is active low 


EOT2[TC2] Polarity 


0 EOT2[TC2] is active high 
1 EOT2[TC2] is active low 


DMAReq3 Polarity 

0 DMAReq3 is active high 
1 DMAReq3 is active low 
DMAAck3 Polarity 

0 DMAAck3 is active high 
1 DMAAcks is active low 
EOT3[TC3] Polarity 

0 EOTS3[TC3] is active high 
1 EOT3[TC3] is active low 


Reserved 


18.3.2 DMA Sleep Mode Register (DMAQ0_SLP) 


The Sleep Mode Register (DMAO_SLP) enables the DMA controller to enter sleep (low-power) mode 
and programs the number of PLB clock cycles to wait when the controller is idle before going to sleep. 
The DMA controller only goes to sleep when no DMA channels are enabled and no configuration or 
status (DCR) register operations are in progress. Reading or writing any of the DMA control or status 
register awakens the DMA controller. 


To enable sleep mode set DMAO_SLP[SME] and CPM0O_ER[DMA]. When sleep mode is enabled and 
the DMA controller becomes idle the 10-bit idle timer begins counting down from the programmed 
value. Only the upper 5 bits of the idle counter are programmable; the lower 5 bits are hardcoded to 
0b11111. Therefore, the minimum granularity of the idle timer is 32 PLB clock cycles. When the 
counter reaches zero, the controller is placed in sleep mode. 
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Figure 18-3. DMA Sleep Mode Register (DMAO_SLP) 


0:4 IDU Idle Timer Upper 
0-31 
5:9 IDL Idle Timer Lower Lower 5-bit portion of the idle timer. 
Hardcoded to 0b11111 Writing this field has no effect. 
Sleep Mode Enable If SME=1, also set CPMO_ER[DMA] to 
0 Sleep disabled enable the Clock and Power 


1 Sleep enabled Management macro to put the DMA 
controller to sleep. 


a 


Upper 5-bits of the idle timer. 


18.3.3 DMA Status Register (DMA0_SR) 


As shown in Figure 18-4, the DMA Status Register (DMAO_SR) provides status information for each 
of the DMA channels. Bits in DMAO_SR are set in hardware, and can be either read or cleared by 
software. Clearing is performed by writing a word to DMAO_SR containing a 1 in any bit position to be 
cleared and 0 in all other bit positions. 


The terminal count status (DMAO_SR[CSn)), end of transfer status (DMAO_SR[TSn)]) and error status 
(DMAO_SR[RIn]) must be cleared for a DMA channel to operate. If a scatter/gather operation 
generates an interrupt for any of the above conditions, the channel pauses until software clears the 
associated status field(s) in DMAO_SR. 


cso CS2 TSO TS2 RIO Al2 IRO IR2 ERO ER2 CBO CB2 SGO SG2 


OTT 2 [314] S[S]7 [8] 9 tO] 14] 12] 19] 14] v5] 16] 17] 16] 19] 20]24 [22 |ea]24]es|z6[27[28 SH 


CS1 CS3 TS1 TS3 ARIt1 RI3 IR1 IR3 ER1 ER3 CB1 CB3 SGi SG3 


Figure 18-4. DMA Status Register (DMA0_SR) 


0:3 CS[0:3] | Channel 0-3 Terminal Count Status Set when the transfer count reaches 0. 
0 Terminal count has not occurred 
1 Terminal count has been reached 


4:7 TS[0:3] | Channel 0-3 End of Transfer Status Only valid for channels with 
0 End of transfer has not been requested DMA0_CRn{(ETD]=0. 
1 End of transfer has been requested 


Preliminary Direct Memory Access Controller 18-7 


Channel 0-3 Error Status See “Errors” on page 18-14 for more 
0 No error information. 
1 Error occurred 


Internal DMA Request 
0 No internal DMA request pending 
1 Internal DMA request is pending 
External DMA Request 


0 No external DMA request pending 
1 External DMA request is pending 


24:27 | SG[O:3} 


11 


Channel Busy 
0 Channel is idle 

1 Channel currently active 
Scatter/Gather Status 


0 No scatter/gather operation in progress 
1 Scatter/gather operation in progress 


18.3.4 DMA Channel Control Registers (DMAO0Q_CRO—DMA0_CR3) 


The DMA Channel Control Registers (DMAO_CRO-DMA0_CR3) are used to configure and enable 
their respective DMA channels. Before a DMA channel can transfer data, the channel control, source 
address, destination address, and transfer count registers must be programmed. If a DMA channel is 
setup for scatter/gather transfers (DMA_SGC[SSGn]=1) the DMA channel control register is 
automatically loaded from memory. For additional details see “Scatter/Gather Transfers” on 

page 18-16. 


Channel Enable This field is automatically cleared when 
0 Channel is disabled the transfer completes or an error occurs. 
1 Channel is enabled 


Channel Interrupt Enable When enabled, interrupts are generated 

0 Disable interrupts from this channel for terminal count, end of transfer, and 

1 Enable interrupts from this channel errors conditions. See “DMA Interrupts” 
on page 18-15. 
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In peripheral mode: 

0 Transfers are from memory-to-peripheral 
1 Transfers are from peripheral-to-memory 
In device-paced memory-to-memory mode: 
0 Peripheral is at the destination address 

1 Peripheral is at the source address 


Peripheral Location 
0 External peripheral (EBC) bus 
1 OPB (UARTO) 


Peripheral Width/Memory alignment 

00 Byte (8 bits) 

01 Halfword (16 bits) 

10 Word (32 bits) 

11 Doubleword (64 bits) memory-to-memory 
transfers only 


Destination Address Increment 

0 Do not increment destination address 

1 After each data transfer increment the 
destination address by: 
1, if the transfer width is a byte (8 bits) 
2, if the transfer width is a halfword (16 bits) 
4, if the transfer width is a word (32 bits) 
8, if the transfer width is a doubleword (64 bit) 


Source Address Increment 

0 Do not increment source address 

1 After each data transfer increment the source 
address by: 
1, if the transfer width is a byte (8 bits) 
2, if the transfer width is a halfword (16 bits) 
4, if the transfer width is a word (32 bits) 
8, if the transfer width is a doubleword (64 bit) 


Buffer Enable 
0 Disable DMA 32-byte buffer 
1 Enable DMA 32-byte buffer 


Transfer mode 

00 Peripheral 

01 Reserved 

10 Software-initiated memory-to-memory 
11 Device-paced memory-to-memory 


Peripheral Setup Cycles 
0-3 


Peripheral Wait Cycles 
0-63 
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TD is not used (don’t care) for software- 
initiated memory-to-memory transfers. 


Transfer width equals peripheral width for 
peripherals. 


If BEN=0 discrete read and write 
operations occur for each data transfer. 


Number of PerClk cycles that the EBC 
peripheral bus is idle from the last 
peripheral bus transaction to DMAAckn 
becoming active. Used only for the 
peripheral side of peripheral mode 
transfers. 


DMAAckn remains active for PWC+1 
PerClk cycles. Used only for the 
peripheral side of peripheral mode 
transfers. 
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Peripheral Hold Cycles 
0-7 


End-of-Transfer/Terminal Count (EOTn[TCn]) 
Pin Direction 

0 EOTn[TCn] is an EOT input 

1 EOTn[TCn] is a TC output 


Terminal Count (TC) Enable 
0 Channel does not stop when TC is reached 
1 Channel stops when TC is reached 


Channel Priority 

00 Low priority 

01 Medium low priority 
10 Medium high priority 
11 High priority 


Memory Read Prefetch Transfer 
00 Prefetch 1 doubleword 

01 Prefetch 2 doublewords 

10 Prefetch 4 doublewords 

11 Reserved 


Parity Check Enable 
0 Disable parity checking 
1 Enable parity checking 


Address Decrement 
0 SAI and DAI fields control memory address 
incrementing. 


1 After each data transfer the memory address 


is decremented by the transfer width. 


| Reserved 


The number of PerClk cycles between 
the time that DMAAckn becomes inactive 
until the peripheral bus is available for the 
next bus access. Used only during the 
peripheral side of peripheral mode 
transfers. 


ETD must be set to 1 if the channel is 
configured for software-initiated memory- 
to-memory transfers. 


lf TCE=1, it is required that ETD=1. 


Actively requesting channels of the same 
priority are ranked in order by channel 
number, channel 0 having the highest 
priority. See “Channel Priorities” on 
page 18-13 for more information. 


_ Used only during memory-to-peripheral 


and deviced-paced memory-to-memory 
transfers. To enable prefetching it is 
required that BEN=1. 


Enables parity checking for peripheral 
mode transfers. See “Data Parity During 
DMA Peripheral Transfers” on 

page 18-14. 


lf DEC=1, itis required that BEN=0. This 
field is valid only for peripheral mode 
transfers (TM=00). 


18.3.5 DMA Source Address Registers (DMA0O_SA0-—DMAQO_SA3) 


The DMA Source Address Registers (DMAO_SAO-DMA0O_SA3) contain the source address for 
memory-to-memory and memory-to-peripheral transfers. If a DMA channel is setup for scatter/gather 
transfers (DMA_SGC[SSGn]=1) the source address register is automatically loaded from memory. 
For additional details see “Scatter/Gather Transfers” on page 18-16. 


The source address must be aligned at the transfer width programmed in DMAO_CRn[TW}, otherwise 
the error bit (DMAO_SR[Rin)) is set for the channel and no transfer occurs. If the source address 
increment bit in the channel’s control register is set (DMAO_CRn{SAI]) the address is incremented by 
the transfer width after each data transfer. In contrast, if the channel is performing a memory-to- 
peripheral transfer and the address decrement bit is set (DMAO_! CRn[DEC]= 1), the address is 
decremented by the transfer width after each transfer. 
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Figure 18-6. DMA Source Address Registers (DMA0_SA0—DMAO_SA3) 


0:31 Source address for memory-to-memory 
and memory-to-peripheral transfers. 


18.3.6 DMA Destination Address Registers (DMA0_DA0-DMAO_DA3) 


The DMA Destination Address Registers (DMA0O_DA0-DMAO_DAS3) contain the destination address 
for memory-to-memory and peripheral-to-memory transfers. When a DMA channel is configured for 
scatter/gather transfers (DMA_SGC[SSGn]=1) the destination address register is automatically 
loaded from memory. For additional details see “Scatter/Gather Transfers” on page 18-16. 


The destination address must be aligned at the transfer width programmed in DMAO_CRn[TW}], 
otherwise the error bit (DMAO_SR[RIn)) is set for the channel and no transfer occurs. If the destination 
address increment bit in the channel’s control register is set (DMAO_CRn[DAI]) the address is 
incremented by the transfer width after each data transfer. However, if the channel is performing a 
peripheral-to-memory transfer and the address decrement bit is set (DMAO_CRn[DEC]=1), the 
destination address is decremented by the transfer width after each transfer. 


0 31 


Figure 18-7. DMA Destination Address Registers (DMA0_DA0-DMA0_DA3) 


Destination address for memory-to- 
memory and peripheral-to-memory 


transfers. 


18.3.7 DMA Count Registers (DMA0O_CTO—DMA0O_CTS3) 


The DMA Count Registers (DMAO_CT0-DMA0O_CTS3) contain the number of transfers left in the DMA 
transaction for their respective channels when EOTn[TCn] is programmed as a terminal count output. 
When EOTn[TCn] is programmed as an end-of-transfer input (DMAO_CRn[ETD]=1), DMAO_CTn 
continues to count down past zero until EOTn is asserted. 
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lf a DMA channel is setup for scatter/gather transfers (DMA_SGC[SSGn]=1) the count register is 
automatically loaded from memory. For additional details see “Scatter/Gather Transfers” on 
page 18-16. 


The value in the DMA count register is interpreted as the number of transfers of the width specified in 
DMAO_CRn[PW], not the total number of bytes. The maximum number of transfers is 64K, and each 
transfer can be either 1, 2, 4, or 8 bytes as programmed in DMAO_CR[PW]. The maximum count of 
64K transfers is programmed by writing zero to DMAO_CTn. 


NTR 


Figure 18-8. DMA Count Registers (DMA0_CT0-DMA0_CTS3) 


16:31 Number of transfers remaining 


18.3.8 DMA Scatter/Gather Descriptor Address Registers (DMA0_SGO- 
DMAO_SG3) 


When a DMA channel is setup for scatter/gather transfers (DMA_SGC[SSGn]=1), the Scatter/Gather 
Descriptor Address Register (DMAO_SGn) contains the memory address of the next scatter/gather 
descriptor table. Prior to starting a scatter/gather transfer, software must write the address of the 
channel’s descriptor table to DMAO_SGn. Once the scatter/gather transfer starts, DMAO_SGn is 
automatically updated from the descriptor table. For additional details see “Scatter/Gather Transfers” 
on page 18-16. 


Figure 18-9. DMA Scatter/Gather Descriptor Address Registers (DMA0_SGO-DMA0_SG3) 


kaa Address of next scatter/gather descriptor 
table. 
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18.3.9 DMA Scatter/Gather Command Register (DMA0_SGC) 


The DMA Scatter/Gather Command Register (DMAO_SGC) is a 32-bit register, of which 8-bits are 
implemented. Bits 0:3 are the Start Scatter/Gather Enable bits for channels 0 to 3, and bits 16:19 are 
the corresponding Enable Mask bits for the Start Scatter/Gather Enable bits. Setting a Start 
Scatter/Gather Enable bit causes the selected channel to begin a scatter/gather operation, while 
writing a 0 stops the Scatter/Gather operation. To start or stop a specific Scatter/Gather channel, the 
corresponding Enable Mask bit must be set to 1; otherwise, the register holds the previous value. 
Note that halting a scatter/gather transfer does not stop the transfer currently in progress. 


Upon completion of a scatter/gather sequence of transfers the DMA controller clears 
DMAO_SGC[SSGn]. 


If an error occurs when the DMA controller is reading the Scatter/Gather descriptor table, 
DMAO0_SGC[SSGn] is cleared for the affected channel, and the channel's error status bit 
(DMAO_SR[Rin)) is set. 


For additional details see “Scatter/Gather Transfers” on page 18-16. 


SSGO SSG2 EMO EM2 


[OTA | 2a pase aes S| 0] 7] 18] 10 ET 


SSG1 SSG3 EM1 EM3 


Figure 18-10. DMA Scatter/Gather Command Register (DMA0_SGC) 


0:3 SSG0:3] | Start Scatter/Gather for channels 0-3. To start a scatter/gather operation for 
0 Scatter/gather support is disabled channel n, EM[n] must also be set. 
1 Scatter/gather support is enabled : 


ee [Reed SOCOSCSCSCSC‘@ 
EM[0:3] 


16:19 Enable Mask for channels 0-3. To write SSG[n], EM[n] must be set. 
0 Writes to SSG[n] are ignored Otherwise, writing SSG[n] has no effect. 
1 Allow writing to SSG[n] 


18.4 Channel Priorities 


The priority of DMA transfers is controlled on a per-channel basis by the channel priority field in the 
channel control register. Table 18-3 shows the different priority settings for DMAO_CRn[PW]. 


Table 18-3. DMA Transfer Priorities 
DMAO0O_CRn{[CP] | Priority Level 


OOD 


0601 
0b10 Medium High 
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Table 18-3. DMA Transfer Priorities 


DMA0_CRn[CP] | Priority Level 
06m 


These priorities serve two purposes. First, the DMA controller arbitrates among all actively requesting 
channels and selects the highest priority one for service. If multiple channels request at the same 
priority, the arbiter selects the lowest numbered channel for service. Secondly, DMAO_CRn[CP] 
determines the priority of the internal PLB transactions that the DMA controller uses to read and write 
data. 


18.5 Data Parity During DMA Peripheral Transfers 


The DMA controller works in conjunction with the peripheral bus controller (EBC) to generate and 
check parity during peripheral mode DMA transfers. When DMAO_CRn[PCE]=1 parity checking is 
enabled for peripheral mode transfers on channel n. 


During memory-to-memory transfers any data error checking and/or correction is dependent on the 
configuration of the relevant memory controller. For example, if ECC is enabled on the SDRAM 
controller, only uncorrectable errors are reported to the DMA controller. Similarly, an EBC memory 
bank with parity enabled will report an error if a parity error is encountered during a memory read 
operation. See “Peripheral Bank Access Parameters (EBCO_BnAP)” on page 16-26 for more 
information on peripheral bus parity checking. 


18.6 Errors 


The DMA controller detects and reports three types of errors: address alignment, PLB timeout and 
slave errors. The DMA controller reports errors through the channel error status bit in the DMA status 
register (DMAO_SR[RiIn)). If the error status bit for a channel is set, the channel enable bit 
(DMAO_CRn[CE)) is cleared, disabling the channel. An interrupt signal is also presented to the 
interrupt controller if DMAO_CRn[CIE] is set. See “DMA Interrupts” on page 18-15 for more 
information on interrupt processing. 


When the DMA controller has multiple channels active, an error may be reported on the current 
channel which was in actuality caused by a previously active channel. This causes the current 
channel to have its error status bit set. Therefore, for deterministic error analysis with multiple DMA 
channels active the PLB slave bus controller’s error status registers (the bus error address register in 
particular), must be queried to isolate the actual channel which encountered the error. In any case, 
the channel causing the errors will eventually cause all active channels, including itself, to be 
disabled. 


18.6.1 Address Alignment Error 


The source address (DMAO_SAn) and destination address (DMAO_DAn) registers must be aligned to 
the programmed transfer width (DMAO_CRn[TW)).The address alignment rules are outlined in 
Table 18-4. In addition, when a channel is configured for scatter/gather transfers, the scatter/gather 
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table must be word-aligned. If the source, destination and scatter/gather address registers are not 
appropriately aligned an error occurs immediately after the channel is enabled. 


Table 18-4. Address Alignment Requirements 


Required Alignment for: 
DMAO_CRn[PW] | Source Address Register (DMAO_SAn) 
Setting and 
Destination Address (DMAO_DAn) 


0b00 Byte (8-bit) 


0b01 Halfword (16-bit) 
0b10 Word (32-bit) 
0b11 Doubleword (64-bit) 


18.6.2 PLB Timeout 


The DMA controller uses PLB operations to read and write memory. A PLB timeout results if the DMA 
controller attempts to access a non-existent memory location. This will occur if the source, destination 
or scatter/gather address registers do not map to valid memory locations. 


18.6.3 Slave Errors 


If the DMA controller detects an error from a PLB slave, it finishes any active read/write pair transfer — 
on the channel and then reports an error. An SDRAM uncorrectable ECC error and an EBC bank 
protection error are examples of PLB slave errors. 


18.7 DMA Interrupts 


Each DMA channel can generate interrupts for end of transfer, terminal count and error conditions. 
Interrupts from a particular DMA channel are enabled by setting the channel enable bit in the 
channel's control register (DMAO_CRn[CIE]=1). When an interrupt occurs for a given channel, the 
DMA controller sends a signal to the Universal Interrupt Controller. For the PPC405GP’s CPU to take 
an exception, interrupts from the particular DMA channel must be enabled in the interrupt controller’s 
interrupt enable register (UICO_ER). Also, the CPU’s machine state register’s interrupt enable bit 
must be enabled for the appropriate interrupt type (critical or non-critical), MSR{[EE,CE]. See 
Chapter 10, “Interrupt Controller Operations” for more information on interrupt controller processing. 


For DMA channels with interrupts enabled (DMAO_CRn[CIE]=1) and not performing a scatter/gather 
transfer an interrupt is generated while any of the following are true: 


DMAO_CRn[TCE]=1 and DMAO_SR[CSn]=1 
DMAO_SR[TSn]=1 
DMAO_SR[RIn]=1 


When a channel is performing a scatter/gather transfer, interrupt generation is further qualified by the 
TCI, ETI and ERI bits loaded from the descriptor table (see Table 18-5, “Scatter/Gather Descriptor 
Table,” on page 18-16). Any of the following conditions cause an interrupt during a scatter/gather 
transfer when interrupts are enabled for the channel (DMAO_CRn[CIE=1)): 
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TCl=1 and DMAO_CRn[TCE]=1 and DMAO_SR[CSn]=1 
ETI=1 and DMAO_SRI[TSn]=1 
ERI=1 and DMAO_SR[RIn]=1 


For both normal DMA and scatter/gather transfers the interrupt remains active until the appropriate 
bits are cleared in the DMA Status Register (DMAO_SR). In addition, interrupts from a channel 
performing a scatter/gather transfer cause the channel to pause until the interrupt is cleared. 


18.8 Scatter/Gather Transfers 


With a normal DMA transfer it is necessary to program a channel’s control, source, destination, and 
count registers for each transfer. The scatter/gather capability of the DMA controller provides a more 
efficient solution for applications that require multiple transactions on a single DMA channel. Instead 
of individually programming a channel's registers, software creates a set (linked list) of descriptor 
tables in system memory. Table 18-5 illustrates the required table format. 


Table 18-5. Scatter/Gather Descriptor Table 


Byte 0 Byte 1 Byte 2 Byte 3 


x (word aligned) DMA Channel Control Word 
Source Address 


X+8 Destination Address 


aK Dena cee 
Next Scatter/Gather Descriptor Table Address 


Table 18-6 details the usage of the bit fields in the scatter/gather table. 


Table 18-6. Bit Fields in the Scatter/Gather Descriptor Table 


EL a ere 


Link 

0 This is the last session 

1 Fetch next descriptor from address DMAO_SGn when the channel completes 

Enable Terminal Count Interrupt 

0 Do not interrupt when terminal count occurs 

1 Allow an interrupt when terminal count occurs 
ETI 


Enable End of Transfer Interrupt 
0 Do not interrupt when end of transfer occurs 
1 Allow an interrupt when end of transfer occurs. 


4 Enable Error Interrupt 
0 Do not interrupt if an error occurs 
1 Allow an interrupt if an error occurs 


To configure a channel for a scatter/gather transfer the DMA Scatter/Gather Descriptor Address 
Register (DMAO_SGn) for the channel is set to the address of the first descriptor table, which must be 
word-aligned. To begin the scatter/gather transfer, software then writes a start scatter/gather and 
enable mask to the Scatter/Gather Command Register (DMAO_SGC). The DMA controller then reads 
the descriptor table at address DMAO_SGn and updates the DMA controller registers as shown in 
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Table 18-7. Upon receiving the data from the scatter/gather descriptor table, the channel's terminal 
count status bit (DMAO_SR[TCn]) is automatically cleared. 


Table 18-7. DMA Registers Loaded from Scatter/Gather Descriptor Table 


Register Loaded 
DIVAG_GFn— 
ONAd_SAn 
DITAO_DAn 
DHA0-CTa 
DWtA0_SGn 


After loading the channel’s registers from the descriptor table, the transfer functions as a normal non- 
scatter/gather operation. 


If the channel control word loaded from the descriptor table enables interrupts for the channel 
(DMAO_CRn[CIE]=1), the TCI, ETI, and ERI bits further qualify the generation of interrupts. See 
“DMA Interrupts” on page 18-15 for more information on scatter/gather interrupts. 


If the LK (link) bit was not set the scatter/gather process stops when the current transfer completes. 
Otherwise, the DMA controller reads the descriptor table at address DMAO_SGn and the process 
repeats. 


18.9 Programming the DMA Controller 


Before the DMA controller can transfer data it must be configured, both globally and on a per-channel 
basis. Global settings include the DMA Polarity Register (DMAO_POL) and DMA Sleep Mode 
Register (DMAO_SLP). For most applications, these registers should be configured when the DMA 
controller is first initialized. To prevent spurious activity resulting from changing the active level for 
DMARegn, DMAAckn, or EOTn[TCn]j, a channel’s configuration in the Polarity Register should not be 
altered when the channel is enabled (DMAO_CRn[CE]=1). 


Each channel has a Control (DMAO_CRnhn), Source Address (DMAO_SAn), Destination Address 
(DMA0_DAn), Count (DMAO_CTn), and Scatter/Gather Descriptor Address (DMAO_SGn) register. 
The type of DMA transfer determines which of these registers must be programmed and what causes 
the channel to start. In all cases, the terminal count (CSn), end of transfer (TSn) and error status (Rin) 
bits in the DMA Status Register (DMAO_SR) must be cleared or the channel will not start. 


The programming information that follows assumes that the DMA controller is operating in non- 
scatter/gather mode. To use scatter/gather transfers the channel! configuration data must be written 
into a set of descriptor tables in system memory. See “Scatter/Gather Transfers” on page 18-16 for 
additional details. 


18.9.1 Peripheral Mode Transfers 


DMA peripherals are either devices attached to the EBC interface via the DMAReqn and DMAAckn 
lines, or the internal serial port (UARTO). During a peripheral mode transfer an external peripheral 
asserts DMARegn to request a DMA transfer. For metastability protection DMAReqgn is double 
latched in the DMA upon assertion, and sampled with a single latch on the deassertion. 
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Timings on the memory-access portion of peripheral mode DMA transfers are governed by the 
configuration of the associated memory controller. In contrast, timing during the peripheral portion of 
the transfer is controlled by the PSC, PWC and PHC fields in the DMA Channel Control Registers. 
The effect of these parameters on peripheral timings is illustrated in Figure 18-11 on page 18-18 and 
Figure 18-12 on page 18-19. Although shown as active high, the polarity (active state) of DMARegn, 
DMAAckn, and EOTn{TCn] are programmable via the DMA Polarity Register (DMAO_POL). 


ode CORES Seo 
PerClk F r BALLS ELE E 


ee eee ee 


DMAReqn 


DMAAckn or, he 
'PSC/PWC =PHC! =(PSCIPWC PHC: 
BOTS). at 
PerData0:31 bt  -it bi {| _t—§ 
PerPand:3 a ao a 
PerR/W | C4 


PerAddr0:31 au. 
PerReady | 


i 


PerErr 
Figure 18-11. Peripheral-to-Memory DMA Transfer 


Peripheral setup cycles (DMAO_CRn[PSC)) provide a delay between any previous operation on the 
peripheral bus and DMAAckn becoming active. Following the setup time DMAAckn is driven active for 
(DMAO_CRn[PWC] + 1) PerClk cycles. During peripheral-to-memory transfers read data from the 
peripheral is sampled on the PerClk edge where DMAAckn rises. After DMAAckn becomes inactive 
the peripheral bus is held idle for DMAO_CRn[PHC] PerClk cycles. 


The second transfer in Figure 18-11 on page 18-18 illustrates the required DMAReqgn timing to 
prevent a subsequent DMA transfer. For all peripheral mode transfers DMAReqn must be sampled 
inactive at the end of the last PerClk cycle where DMAAckn is active. 


The EOTn{TCn] I/O can be configured either as an end of transfer input (DMAO_CRn[ETD]=0) or a 
terminal count output (DMAO_CRn[ETD]=1). When programmed as a terminal count output, 
EOTn[TCn] is asserted in the cycle after DMAAckn became inactive and the channel's count register 
(DMA0_CTn) reached zero. EOTn[TCn] remains active until the terminal count status bit is cleared in 
the DMA status register (DMAO_SR[CSn]). 


If EOTn[TCn] is configured as an end of transfer input (DMAO_CRn{ETD]=0), EOTn{TCn] must be 
sampled active during the last DMAAckn cycle. If the channel is configured for scatter/gather transfers 
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EOTn[TCn] should be immediately deasserted to prevent the subsequent transfer from ending 
prematurely. Figure 18-12 on page 18-19 shows the required timing. 
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Figure 18-12. Memory to Peripheral DMA Transfer 
For both peripheral-to-memory and memory-to-peripheral transfers the transfer width 


(DMAO_CR[PW)) must be set to the data bus width of the peripheral. This is because the DMA 
controller does not pack or unpack data on the peripheral side of transaction. 


Peripheral-to-Memory Transfer 


To perform a peripheral-to-memory DMA transfer from an EBC-attached DMA peripheral: 


1. Set destination address register (DMAO_DAn) to the desired memory location. The address must 
be aligned to the programmed transfer width (DMAO_CRn[PW)), otherwise an alignment error will 


occur. 
2. Program the count register (DMAO_CTn) for the number of transfers. 
. Clear the channel’s status bits in the DMA status register (DMAO_SR). 
4. In the channel control register (DMAO_CRnh): 

a. Optionally enable the DMA buffer, BEN=1. 

b. Optionally enable parity checking, PCE=1. 

c. Set the destination address increment, DAI=1. 

d. Set the transfer mode to peripheral, TM=0b00. 

e. Set the peripheral location to external, PL=0. 

f. Set the transfer direction to peripheral-to-memory, TD=1. 


[e) 
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' g. Enable the channel CE=1. 


Once the DMA channel is active, the peripheral initiates a transfer by activating the DMARegn pin for 
the channel. The PPC405GP then activates the DMAAckn pin to read data from the peripheral. This 
continues until either a terminal count or end of transfer condition occurs. 


Memory-to-Peripheral Transfer 
To perform a memory-to-peripheral DMA transfer to an EBC-attached DMA peripheral: 


1. Set source address register (DMAO_SAn) to the desired memory location. The address must be 
aligned to the programmed transfer width (DMAO_CRn[PW)), otherwise an alignment error will 
occur. 


2. Program the count register (DMAO_CTn) for the number of transfers. 
. Clear the channel’s status bits in the DMA status register (DMAO_SR). 
4. In the channel control register (DMAO_CRn): 


ie) 


a. Optionally enable the DMA buffer, BEN=1, and set the desired prefetch count, PF. 


b. Optionally enable parity generation, PCE=1. 

c. Set the source address increment, SAI=1. 

d. Set the transfer mode to peripheral, TM=Ob00. 

e. Set the peripheral location to external, PL=0. 

f. Set the transfer direction to memory-to-peripheral TD=0. 

g. Enable the channel, CE=1. 
Once the DMA channel is active, the peripheral initiates a transfer by activating the DMAReqn pin for 
the channel. The PPC405GP then reads the source memory and subsequently activates the 


DMAAckn pin to write data to the peripheral. This continues until either a terminal count or end of 
transfer condition occurs. 


18.9.2 Memory-to-Memory Transfers 


Memory-to-memory transfers can be initiated either by software or by an external device. If initiated 
via software, the transfer begins as soon as the channel is configured and enabled. When initiated by 
hardware (also known as a device-paced memory-to-memory transfer), software configures the 
channel for a memory-to-memory move and transfers begin when an external device places an active 
request on the channel request line, DMARegn. 


Hardware-Initiated (Device-Paced) Memory-to-Memory Transfers 
To perform a device-paced memory-to-memory DMA transfer: 
1. Set the transfer width (DMAO_CRn/[PW)) to the width of the device-paced memory. 


2. Set the source (DMAQ_SAn) and destination (DMAO_DAn) address registers to the desired 
memory locations. These addresses must be aligned to the programmed transfer width 
(DMAO_CRn[PW)), otherwise an alignment error will occur. 

3. Program the count register (DMAC_CTn) for the number of transfers. 

4. Clear the channel’s status bits in the DMA status register (DMAO_SR). 

5. In the channel control register (DMAO_CRn): 

a. Optionally enable the DMA buffer, BEN=1, and set the desired prefetch count, PF. 
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b. If the device-paced memory is at the source memory location set PL=1. 

c. Set the source address increment, SAI, and destination address increment, DAI, as desired. 

d. Set the transfer mode to device-paced memory-to-memory, TM=0b1 1. 

e. Enable the channel, CE=1. 
Once the DMA channel is configured for this mode, the external device initiates a transfer by 
activating the DMARegn input. The PPC405GP then reads the source memory, buffers the data in the 
DMA controller and then outputs the data to the destination memory address. Transfers continue as 
long as the controlling device maintains an active signal on DMARegn and the channel count register 
(DMAO_CTn) is non-zero. To pause a device paced memory-to-memory transfer, the controlling 
device must deassert DMAReqn one PerClk cycle before the last cycle in the device-paced memory 
access. 


18.9.3 Software-Initiated Memory-to-Memory Transfers (Non-Deviced Paced) 
To perform a software-initiated memory-to-memory DMA transfer: 


1. Set the transfer width (DMAO_CRn[PW)) as desired. 


2. Set the source (DMAO_SAn) and destination (DMAO_DAn) address registers to the desired 
_ memory locations. These addresses must be aligned to the programmed transfer width 

(DMAO_CRn[PW)), otherwise an alignment error will occur. 

3. Program the count register (DMAO_CTn) for the number of transfers. 

. Clear the channel's status bits in the DMA status register (DMAO_SR). 

5. In the channel control register (DMAO_CRn): 
a. Optionally enable the DMA buffer, BEN=1. 
b. Set the source address increment, SAI, and destination address increment, DAI, as desired. 
c. Set the transfer mode to software-initiated memory-to-memory, TM=0b10. 
d. Enable the channel, CE=1. 


bh 


Once the channel is enable the DMA controller transfers data from source to destination until the 
channel count reaches zero. Note that memory-to-memory transfers initiated by software do not use 
DMARegn or DMAAckn. 
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Chapter 19. Ethernet Media Access Controller 


The PPC405GP Ethernet media access controller (EMAC) is a generic implementation of the 
Ethernet Media Access Control (MAC) protocol complying with ANSI/IEEE Std 802.3 and IEEE 
802.3u supplement. EMAC supports half-duplex oe and full-duplex operation for both 
10-Mbps and 100-Mbps operations. 


EMAC provides two on-chip peripheral bus (OPB) slave interfaces. The first OPB interface provides 
access to EMAC configuration and status registers. The PLB/OPB bridge allows the 405 processor 
core to access these registers. 


The second OPB interface is used to exchange packet information with the memory access 

layer (MAL). The MAL is a multi-channel, intermediate hardware layer that resides between packet- 
based communication macros (such as EMAC) and external memory (such as SDRAM or SRAM). 
The MAL transfers packet information and packet status between the EMAC and external memory 
separately for each of the three EMAC channels (one receive and two transmit). Software (a device 
driver) is responsible for maintaining a buffer descriptor ring and a set of data buffers in external 
memory for each of the channels, and manages the exchange of packet data between the data 
buffers and the software protocol. 


The MAL performs functions such as arbitration between service requests, handling the buffer 
descriptor memory structure, updating the descriptor status/control fields at the end of packet 
transfer, and so on. EMAC supports unlimited burst length transactions on the MAL interface. 


EMAC utilizes its media independent interface (Mil) to communicate with standard physical interface 
devices (PHYs). 


EMAC utilizes independent Receive (RX) and Transmit (TX) FIFOs. Programmable FIFO thresholds 
minimize overflows and underruns and can launch integrated IEEE 802.3x Pause Packets for flow 
control. 


As part of the Remote Monitoring (RMON) and Management Information Base (MIB) defined in IEEE 
802.3z the EMAC contains registers that count the number of octets transmitted and received. 
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Figure 19-1 illustrates EMAC in a typical Ethernet application. 
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Figure 19-1. EMAC in a Typical Ethernet Application 


Note: EMAC is connected to a single OPB, to which both the OPB master and MAL are also 


connected. The EMAC transmit channels operate independently from the receive channel. 


19.1 EMAC Features 


The PPC405GP EMAC features: 


Dual speed (10/100 Mbps) CSMA/CD (half-duplex) and full-duplex Ethernet MAC-compliant with 
ANSI/IEEE Std. 802.3 and IEEE 802.3u supplement. 


Automatic source address insertion or replacement for transmitted packets is a programmable 
option. . 


Automatic stripping of frame padding bytes and frame check sequence (FCS) is a programmable 
option. 


When padding bytes are stripped, the padding and FCS field are removed. FCS stripping removes 
only the FCS field. 


FCS control for transmit/receive packets. 
Access to registers with support for burst processing. 


MAL for packet moving having one-cycle MAL slave latency. 
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e Independent, large (2 KB) transmit and (4 KB) receive FIFOs with programmable thresholds to 
minimize overruns and underruns. 


¢ Multiple packet handling in transmit and receive FIFOs. 

e Unicast, multicast, broadcast, and promiscuous address filtering capabilities. 

° Two 64-bit hash filters for unicast and multicast packets. 

e Automatic retransmission of collided packets. 

e Rejection of runt packets before providing them to MAL. 

¢ Mll interface for connection to a variety of PHY layer devices. 

e Programmable inter-packet gap to enable tuning for better system performance. 


¢ Compliance with IEEE 802.3x standard packet-based flow control, including self-assembled contro! 
pause packet transmitting. 


¢ Support for VLAN tag ID in compliance with IEEE Draft 802.3ac/D1.0 standard. 

¢ VLAN tag insertion or replacement for transmit packets is a programmable option. 
¢ Wake On LAN (WOL) handling. 

e Programmable internal and external loop-back capabilities. 

e Extensive error/status vector generation for each processed packet. 

e¢ Power management using a clock and power management (CPM) unit. 


19.2 EMAC Operation 


The EMAC hardware components and its internal structure are illustrated in the block diagram in 
Figure 19-2. 
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Figure 19-2. Internal EMAC Structure 
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The control logic sub-block implements the following functions: 


¢ OPB slave device 

e¢ MAL slave device 

¢ FIFO management logic 

e Ethernet address and pause packet match logic 

e Register file for FIFOs and Ethernet MAC handler management 
¢ Logic for support of WOL technology 


The Ethernet MAC sub-block implements the following functions: 


¢ Transmit MAC Handler (TXMAC) 
¢ Receive MAC Handler (RXMAC) 
e¢ MIl management function unit (STA) 


These functions are described in the following sections. 


19.2.1 MAL Slave Logic 

The MAL slave (MALS) logic controls MAL transactions. MALS transfers TX and RX data between 
MAL and the OPB on one side, and the EMAC FIFO handlers on the other side. MALS is a dedicated 
MAL slave. 

19.2.2 OPB Slave Logic 

The OPB slave (OPBS) logic controls all OPB transactions between the processor core and the 
EMAC configuration and status registers. 

19.2.3 Ethernet Address Match Logic 


Address match logic checks the destination address of received packets against a set of predefined 
addresses specified by the current address filtering mode. EMAC contains one unicast (individual 
address) register, two hash tables for filtering individual and group address, and logic for detecting 
broadcast address (all ones). EMAC supports promiscuous mode and multicast promiscuous mode. 


This logic also checks the destination address of the incoming packet against a special multicast 
address used for control (pause) packet recognition. 


All checks for address matching are performed only after the entire destination address field is 
received (except for promiscuous and multicast promiscuous modes). 

19.2.4 Configuration and Status Registers 

Configuration and status registers define the EMAC configuration and reflect error/status of recent 
transmitted or received packets. 

19.2.5 Wake On LAN Logic 


EMAC supports Wake On LAN (WOL) technology, an industry standard in the Wired for Management 
(WFM) specification. This technology allows a sleeping or powered-off network node to be awakened 
with a special packet called a Magic Packet. In the 405GP, with WOL mode enabled, the EMAC 
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discards all incoming packets and does not request data from the MAL for transmission. When a 
magic packet is detected, the EMAC generates a UIC interrupt on Interrupt 9, called Ethernet WOL. 


19.2.6 Ethernet MAC 
The Ethernet MAC logic supports the Media Independent Interface (MIl). 


19.2.7 EMAC Loop-Back Modes 
EMAC supports the external and internal loop-back modes illustrated in Figure 19-3. 
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Figure 19-3. EMAC Loop-Back Modes 


External loop-back mode uses the PHY device. To EMAC, external loop-back is identical to full-duplex 
operation. Configuring EMAC to operate in a full-duplex mode enables external loop-back. EMAC 
does not need an external loop-back configuration signal. 


In internal loop-back mode, data from the EMAC transmit channel is routed to the EMAC receive 
channel. This loop-back mode functions correctly with or without a PHY connected to EMAC. In 
internal loop-back mode, EMAC does not activate (monitor) any MIl signals. The transmit channel 
signals are buffered internally to the receive channel. However, if internal loop-back is used without a 
PHY, the TX and RX clocks for EMAC must be provided by another means. In internal loop-back 
mode, the EMAC transmit clock and receive clock must be sourced from a single clock. 


19.3 EMAC Transmit Operation 


The transmit part of EMAC is responsible for packet transmission from the MAL device to the MIl 
interface. At the end of the transmission process, EMAC provides a ES tusiomtor word which allows 
monitoring the transmission operation. 


EMAC implements dual transmit channels with MAL (this means that two transmit channels are 
allocated within MAL) for efficient utilization of the Transmit FIFO. Both of these channels use the 
same shared resources inside EMAC. These channels can be configured to independently request 
packets from MAL and drive them into the TX FIFO or act as a single channel (in dependent mode). 
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19.3.1 Arbitration Between TX Channels 


Because both EMAC transmit channels (referred to as TX Channel 0 and TX Channel 1) drive data 
into the same FIFO, they cannot request packet data from MAL at the same time. MAL ensures that 
only one EMAC transmit channel is active at a given time. 


19.3.2 Independent Mode 


In this mode, each EMAC transmit channel independently requests packets from MAL. Each channel 
can be configured to work in single packet or multiple packet modes. 


In single packet mode, EMACO_MR1[TRO] = 00 and EMACO_MR1[TR1] = 00. The channel requests 
one packet from MAL and resets EMACO_TMRO[GNPO, GNP1] as appropriate. The channel asks for 
service again only after EMACO_TMRO[GNPO] = 1 or EMACO_TMRO[GNP'1] = 1 (set by the device 
driver). 


In multiple packet mode, EMACO_MR1[TRO] = 01 and EMACO_MR1[TR1] = 01. After the channel 
finishes transferring a packet, the channel asks MAL for the next packet as soon as the other channel 
is in its Idle Phase and there is enough room in the FIFO. The channel continues to request more 
packets until one of the following events occur: 


¢ The channel receives notification from MAL that the next buffer descriptor is not marked ready for 
transmission. When this occurs, the channel sets EMACO_TMRO[GNPO, GNP1] = 0, as 
appropriate, and waits for software to reactivate it by setting EMACO_TMRO[GNPO] = 1 or 
EMACO_TMRO[GNP'1] = 1. 


e A transmit error or signal quality error (SQE) occurs and the corresponding interrupt is not masked 
in the EMACO_ISER. After such an error, the channel sets EMACO_TMRO[GNPO, GNP1] = 0, as 
appropriate, and sets EMACO_ISR[DBO] = 1 or EMACO_ISR[DB1] = 1 (the EMACO_ISR field that 
is set depends on which channel is active) and the corresponding EMACO_ISR error. The channel 
does not request service again until EMACO_TMRO[GNPO] = 1 or EMACO_TMRO[GNP1] = 1 and 
EMACO_ISR[DBO] = 0 or EMACO_ISR[DB1] = 0 (again, depending on channel). 


In independent mode, if both channels are configured to work in multiple packet mode and both 
EMACO_TMRO[GNPO] = 1 and EMACO_TMRO[GNP1] = 1 at the same time, the channels operate in 
a sequential repeating manner as long as no errors occur. 


19.3.3 Dependent Mode 


In dependent mode, EMACO_MR1[TRO] = 10 and EMACO_MR1[TR1] = 10. The two TX channels act 
as if they were one channel, sharing EMACO_TMRO[GNPD]. When EMACO_TMRO[GNPD] = 1, the 
channel specified by EMACO_TMROJ[FC] starts requesting MAL service. Then, both channels 
continue to request packets from MAL in an alternating, sequential, repeating manner, until one of the 
following occurs: 


¢ One of the channels receives notification from MAL that the next buffer descriptor is not marked 
ready for transmission. When this occurs, EMAC clears EMACO_TMRO[GNPD]. At this point, 
neither channel requests a packet from MAL until EMACO_TMRO[GNPD] back to 1. The first 
channel to request a new packet from MAL when this occurs is the channel that received 
notification from MAL that no packets were ready to transmit (regardless of the setting of 
EMACO_TMRO[FC)). Further requests continue in an alternating, repeating manner. 


ak 
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e Either a transmit error or an SQE occurs on one of the channels and the corresponding interrupt is 
not masked in the EMACO_ISER. One of the following scenarios can occur. 


— lf the other channel has not yet requested MAL service when the channel for which the error 
occurred receives notification from MAL that the transmit operation has completed, 
EMACO_TMRO[GNPD] is cleared (EMACO_TMRO[GNPD] = 0) and the EMACO_ISR[DBDM] is 
immediately set (EMAC_ISR[DBDM]=1). 


— If the other channel was receiving data from MAL, it initiates early termination. If a second 
packet was being transmitted on the media, it is stopped. In these cases, EMACO_TMRO[GNPD] 
is cleared (EMACO_TMRO[GNPD] = 0) and the EMACO_ISR[DBDN] = 1 only after notification 
from MAL that the transmit operation has completed has been received for the second channel. 


At this point, neither channel activates a request to MAL until EMACO_TMRO[GNPD] = 1 and 
EMACO_ISR[DBDM] = 0. The channel specified by EMACO_TMRO[FC] is the first to request service 
from MAL. Subsequent requests continue in an alternating, sequential manner. 


19.3.3.1 MAL TX Descriptor Control/Status Field 


For each packet that is transmitted, MAL uses the descriptor control/status field of the buffer . 
descriptor to both provide EMAC with control information (write) and to obtain packet status from 
EMAC after transmission is complete (read). Software writes the control bits in the buffer descriptor 
prior to packet transmission, and then reads the status bits from the buffer descriptor after packet 
transmission has completed. See “Buffer Descriptor Overview” on page 20-7 for more information on 
the buffer descriptor structure. 


1 2 3 4 5 6 7 8 9 10 11 12 13 


0 14 15 
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MAL usage EMAC specific control/status — for software handling 


Figure 19-4. MAL TX Descriptor Control/Status Field 


MAL Usage See “TX Status/Control Field Format” on page 20-15. ime 


TX Control Information (Write Access) 


Generate FCS 0 FCS is not generated by EMAC. W 
1 EMAC calculates and adds the FCS field to the packet to be 


transmitted. 


7 Generate padding 0 Padding is not generated by EMAC. WwW 
1 EMAC adds the padding field to the packet to be 
transmitted (only when Generate FCS is also set). 
W 


Insert source address 0 EMAC will not insert source address. 
1 EMAC inserts the source address field into the packet to be 
transmitted using the content of the Individual Address High 
(EMACO_IAHR) and Individual Address Low 
(EMACO_IALR) Registers. 
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19-8 


Bad FCS on transmitted 
frame 


Bad previous packet in 
dependent mode 


Loss of carrier sense 


Excessive deferral 


Excessive collisions 


Late collision 


Multiple collision 


Single collision 


Underrun 
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0 EMAC will not replace source address. 

1 EMAC replaces the source address field in the packet to be 
transmitted using the content of the Individual Address High 
(EMACO_IAHR) and Individual Address Low 
(EMACO_IALR) Registers. 

0 EMAC will not insert a VLAN tag. 

1 EMAC inserts the VLAN Tag field into the packet to be 
transmitted using the content of the VLAN TPID register 
(EMACO_VTPID). 

0 EMAC will not replace the VLAN tag. 

1 EMAC replaces the VLAN Tag field in the packet to be 
transmitted using the content of the VLAN TPID register 
(EMACO_VTPID). 


0 FCS was correct in the transmitted packet. 

1 Indicates that a bad FCS was found in the transmitted 
packet. 

0 Packet transmission OK. 

1 Indicates that a Descriptor Error, Transmit Error, or SQE 
Error occurred in the previously transmitted frame. This bit 
will only be activated in dependent mode. 

0 No loss of carrier. 

1 During the transmission of a frame, the PHY_CRS input 
was de-asserted after it previously was asserted, or it was 
not asserted at all. 

0 No excessive deferral. 

1 Indicates that the current frame has been deferred for an 
excessive period of time. Applicable only in half duplex 
mode. The value of this period in bit times is calculated in 
the following ways: For 10/100 Mbps operation it is: 2 x 
(maxFrameSize x 8) bit times. 

0 Less than 16 collisions. 

1 Indicates that the current frame transmission had ended 
with a collision on the 16th consecutive attempt. Applicable 
only in half-duplex mode. 

0 No late collision. 

1 Frame collided outside of the collision window. Applicable 
only in half-duplex mode. 

0 More than 1 but less than 16 collisions did not occur. 

1 Transmitted frame collided more than once but less than 16 
times. Applicable only in half-duplex mode. 

0 Single collision did not occur. 

1 Activates if transmitted frame collided once. Applicable only 
in half-duplex mode. 

0 Underrun did not occur. 

{1 Frame transmission was aborted because of underrun; 
data from the Transmit FIFO was not valid in time to allow 
continuous data transmission on the MIl interface. 


Preliminary 


O Signal Quality Error did not occur. 


1 Signal Quality Error test failed during packet transmission. 
19.3.3.2 Early Packet Termination in Transmit 


Applicable only in half -duplex mode during 10 Mbps 
operation. 


EMAC can initiate early packet termination during transmit, terminating packet transmission before 
MAL finishes transferring all packet data from memory to the Transmit FIFO of EMAC. This is typically 
used when error conditions force the EMAC to abort a transmission. 


EMAC performs early termination on the MAL interface if any of the following conditions occur: 
1. Underrun in the Transmit FIFO. 

2. Excessive Collisions. 

3. Excessive Deferral. 


4. Late Collision. 


19.3.3.3 Empty Packets 


EMAC treats empty packets as if a normal packet had been written, but without writing data to the 
FIFO. A status word of all Os is returned after an empty packet. EMAC expects that for word-aligned 
packets, MAL activates the related word transfer indication during the last data transfer, rather than 
providing an empty packet indication. : 


19.3.3.4 Automatic Retransmission of Collided Packets 


EMAC automatically retransmits packets that collide on the Mil interface. The Transmit FIFO always 
preserves the first 64 bytes of the packet until it receives an indication that the collision window has 
passed. Otherwise, if a collision was detected within the collision window, the packet is retransmitted 
automatically without a new request from MAL. 


19.3.3.5 Inter-Packet Gap (IPG) Tuning 


EMAC allows the user to program the length of the IPG using the EMACO_IPGVR register, which 
contains one-third of the IPG value. By changing the content of this register, the user can adjust the 
fairness or aggressiveness of EMAC on the medium. By programming a lower number (but not less 
than four), EMAC becomes more aggressive on the media. The aggressive nature can result in EMAC 
capturing the network by forcing less aggressive nodes to defer. By programming a larger number of 
bit times, EMAC becomes less aggressive on the network and may defer more often than normal. 
EMAC performance may decrease as the IPG period is increased from the default value, but the 
resulting behavior may improve media performance by reducing the occurrence of collisions. 


19.3.3.6 Full-Duplex Operation 


Full-duplex operation allows simultaneous transmit and receive activity on the MIl interface. The 
software can enable full-duplex mode by setting the EMACO_MR1[FDE] = 1. During operation in full- 
duplex mode, the following changes are made in EMAC functionality. 


¢ Transmission is not deferred while receive is active. 
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The IPG counter, which controls transmit deferral during the IPG between back-to-back transmits, 
is started when transmit activity for the first packet ends, instead of when transmit and carrier 
activity end. 


SQE test is not performed. 


Collision indication is ignored. 


19.3.3.7 Packet Content Configuration Options 


EMAC can modify the content of the packet coming from MAL before issuing it to the MIl interface. 
Figure 19-5 illustrates possible changes in the transmit packet format. 


Packet as delivered to EMAC by MAL 


DA SA | Length/Type FCS 
(optional) (optional) 


Packet as delivered by EMAC on the MIl 


Lenath/Tyoe Padding 


Preamble - combination of alternative zeroes and ones (7 bytes) 

SPD - Start Of Packet delimiter (1 byte) 

DA - Destination Address (6 bytes) 

SA - Source Address (6 bytes) 

Length/Type - length of data field / type definition (Ethernet) (2 bytes) 

Data - data field including padding if needed in short packets 

Padding (optional) - needed to fulfill the packet up to the minimum allowed size 
FCS - Cycle Redundancy Check (4 bytes) 


Figure 19-5. Transmit Packet Structure (Excluding VLAN Tagged and Control Packets) 


The following options can be set for each packet, and can be provided as a part of command write 
transactions from MAL (see “MAL TX Descriptor Control/Status Field” on page 19-7). 


Perform data padding automatically for short transmit packets. EMAC pads the transmit packet with 
extra bytes between the data and the FCS field to reach a total length of 64 bytes (including FCS). 
This feature is supported only when the packet coming from the Transmit FIFO does not contain 
the FCS. Automatic padding enables software to avoid sending padding as a part of the packet 
data field, and therefore, reduces the amount of data transferred on the system bus during the 
transmission of the short packet. 


Source address insertion. When chosen, EMAC adds the source address (SA) field to the 
transmitted packet. EMAC uses the content of the Individual Address High and Individual Address 
Low registers for the source address value. This mode is mutually exclusive with source address 
replacement mode. 
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¢ Source address replacement. When chosen, EMAC replaces the source address received from the 
Transmit FIFO with the content of the Individual Address High and Individual Address Low 
registers. This mode is mutually exclusive with the source address insertion mode. 


e Add four FCS bytes. EMAC calculates the FCS for the transmitted packet. The FCS is appended to 
data coming from the Transmit FIFO or padding bytes (if added). 


e VLAN Tag insertion. When chosen, EMAC adds the content of the VLAN Tag field to the 
transmitted packet (see “VLAN Support” on page 19-18). EMAC uses the content of the VLAN 
TPID and VLAN TCI registers for the VLAN Tag value. This feature is supported only when the 
packet coming from the Transmit FIFO does not contain an FCS. This mode is mutually exclusive 
with the VLAN Tag replacement mode. 


e VLAN Tag replacement. When chosen, EMAC replaces the content of the VLAN Tag field in the 
transmitted packet. EMAC uses the content of the VLAN TPID and VLAN TCI registers for the 
VLAN Tag value. This feature is supported only when the packet coming from the Transmit FIFO 
does not contain an FCS. This mode is mutually exclusive with the VLAN Tag insertion mode. 


Table 19-1 summarizes the possible options of adding FCS and source address to the transmitted 
packet. 


Table 19-1. FCS/SA Enable - Possible Configurations 


Configuration Options EMAC Action 


Generate FCS Eee Replace SA | Add FCS | Add SA Replace SA 
a 


Table 19-2 summarizes the possible options of adding FCS and padding to the transmitted packet. 


Table 19-2. FCS/Pad Enable - Possible Configurations 


Configuration Options EMAC Action 


Generate FCS Generate Pad Add FCS Add Pad 
Oa Oe ee 


Table 19-3 summarizes the possible options of adding FCS and VLAN Tag to the transmitted packet. 


Table 19-3. FCS/VLAN Tag Enable - Possible Configurations 


Configuration Options EMAC Action 


Insert VLAN Replace VLAN Insert VLAN Replace VLAN 
Generate FCS Tag Tag Tag Tag 


SO BO 
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Table 19-3. FCS/VLAN Tag Enable - Possible Configurations 
Configuration Options EMAC Action 


Insert VLAN Replace VLAN Insert VLAN Replace VLAN 
Generate FCS Tag . Tag Tag Tag 


Es maT Ae Cs ee ae Ee ee ee ee 


19.4 EMAC Receive Operation 


The receive part of EMAC is responsible for receiving packets coming from the physical layer (PHY) 
device and forwarding them to the receive channel of the attached MAL. At the end of the reception 
process, EMAC provides a status/error word which allows software to monitor the receive operation. 


19.4.1 EMAC — MAL RX Packet Transfer Flow 

EMAC initiates request for service from MAL whenever the number of occupied entries in the Receive 
FIFO reaches the low water mark specified in EMACO_RWMR[RLW\M]. 

19.4.2 MAL RX Descriptor Status 


For each packet that is received, MAL obtains status from EMAC after reception is complete, and 
writes this information into the buffer descriptor status/control field. Software uses this information to 
monitor the status of received packets. See “Buffer Descriptor Overview” on page 20-7 for more 
information on the buffer descriptor structure. 


0 1 2 3 4 5 6 7 8 9 10 #11 12 13 


CNC 
een eee, \ wut oS | 


MAL usage EMAC specific control/status — for software handling 


Figure 19-6. MAL RX Descriptor Control/Status Field 


| 0.5 | MAL Usage See “RX Status/Control Field Format” on page 20-16. 


RX Status Information (Read a 


Overrun Error O No overrun error. 
1 EMAC detected an overrun error. 
An overrun error occurs if the flow of received data to the RX 
FIFO is corrupted because of insufficient empty space. 


eee Packet 0 Received packet is not a control pause packet. 
oie | 1 Received packet is a control pause packet. ee 
Bad Packet 0 No packet errors. 
ee ee 1 Early termination caused by packet error. 
Runt Packet | 0 Duration of PHY_RX_DV signal OK. 
1 Duration of PHY_RX_DV signal greater than ShortEventMax 
ae in Time constant and less than collision windows. — 
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10 Short Event 0 Duration of PHY_RX_DV signal OK. 
1 Duration of PHY_RX_DV signal was less than 
ShortEventMaxTime constant. 
ed lca Error 0 Received packet length OK. 
1 Received packet length not an integral number of octets. 
Hak FCS 0 FCS OK. 
1 The FCS value does not match the FCS value calculated by 
EMAC. 
Packet Too Long 0 Received packet length OK. 
1 Received packet length exceeded maximum allowed value. 
The received packet exceeded the maximum packet length: 
¢ 1518 octets for standard packet 
¢ 1522 octets for VLAN tagged packetData following the maxi- 
mum packet length is not transferred to MAL 
0 Received packet length field value OK. 
1 Received packet length field value greater than maximum 
allowed LLC data size. 


The maximum allowed logical link control (LLC) data size is 
greater than 1500 and less than 1536. 


In Range Error Refer to Table 19-4 for a description of conditions for activating 
this status bit. 


Table 19-4. In Range Length Error Behavior for Various Packet Lengths 


Programmed Length (Bytes) Actual Length EMAC Action 

Less than 46 Differs from 46 (42 in case of VLAN | In range length error is activated 
(42 if VLAN Tagged packet) Tagged packet) 

Less than 46 46 (42 in case of VLAN Tagged In range length error is not activated 
(42 if VLAN Tagged packet) packet) 


Greater than or equal to 46 Equals the length field value In range length error is not activated 
(42 if VLAN Tagged packet) 
and less than or equal to 1500 
Greater than or equal to 46 
(42 if VLAN Tagged packet) 
and less than or equal to 1500 


Out of Range Error 


Differs from the length field value In range length error is activated 


19.4.3 Early Packet Termination In Receive 


Early packet termination occurs when packet reception is aborted by EMAC before the packet data 
transfer to MAL is completed. 


EMAC performs early termination in the following cases. 


e An overrun occurs in the receive FIFO 


¢ Packet is too long and the Receive Oversize Packet option is not enabled 
(EMACO_RMR[ROP] = 0) 
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19.4.4 Discarding Packets During Receive 


Receive packets can be discarded if certain error conditions are detected. EMAC behavior depends 
on whether the packet to be discarded is already being output to MAL. If the packet containing the 
error is not being provided to MAL when the discard condition is detected, the packet is flushed from 
the Receive FIFO..In this case, EMAC does not provide status information to MAL. If the packet 
containing the error is already being output to MAL, then EMAC initiates an early packet termination 
procedure, as described in “Early Packet Termination In Receive” on page 19-13. 


Each receive discard condition can be individually controlled using appropriate settings, as described 
in “Receive Mode Register (EMACO_RMR)” on page 19-29. 


19.4.5 WOL Support 


WOL logic in EMAC supports WOL technology, an industry standard in the Wired for Management 
(WFM) Specification. WOL remotely awakens sleeping or powered-off nodes on a network. To wake 
up a node, a specific packet, called a magic packet, is sent to network node. When so configured, 
EMAC monitors the incoming bit stream for a magic packet. 


The magic packet, also called a wake-up packet, contains a unique data field not normally expected in 
typical LAN traffic. When a WOL-enabled adapter on a powered-off client decodes this data field, a 
wake-up signal is generated. In the 405GP, with WOL mode enabled, the EMAC discards all incoming 
packets and does not request data from the MAL for transmission. When a magic packet is detected, 
the EMAC generates an interrupt on UIC Interrupt 9, called Ethernet WOL. 


Figure 19-7 shows the wake-up packet format. The key to the wake-up packet is the MAC address of 
the target client, which is repeated 16 times. This pattern of 16 addresses in the data field is not 
expected to occur in any packet except the wake-up packet. 


. 


. 


- 


- 
- 


° s 
° . 
- . 
- . 


Six bytes of ones MAC address repeated consecutively 16 times 


DA - destination address (six bytes) - UAA or Broadcast address 

SA - source address (six bytes) 

Length/Type - fength of data field (802.3)/type definition (Ethernet) (two bytes) 
optional - for example, IP header 

CRC - Cycle Redundancy Check (four bytes) 


Figure 19-7. Wake-Up Packet Format 


The destination address can be a specific address, called the universally administered address 
(UAA), or a broadcast address. If the destination address is a UAA, the wake-up packet is sent only to 
the client at that address. However, since the client is powered off and is no longer transmitting, some 
protocols remove the client MAC address from routing tables and internal caches at other nodes. In 
this case, wake-up packets addressed to a target client are discarded because nodes and routers do 
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not know where to send them. The solution to this problem is to use a broadcast address. A directed 
broadcast has a valid network address and a broadcast host address. Network routers and nodes 
forward directed broadcasts to the appropriate network, where it is seen as a MAC-level broadcast 
and detected by the powered-off client. 


19.4.5.1 EMAC WOL Support 
EMAC enters WOL mode when the wake-up bit in Mode Register 0 is set (EMACO_MRO[WKE] = 1). 


WOL mode should only be changed while the receive MAC idle bit in Mode Register 0 is set 
(EMACO_MRO[RXI!] = 1) and the receive MAC enable bit is reset (EMACO_MRO[RXE] = 0). After the 
wake-up enable bit is set (EMACO_MRO[WKE] = 1), the receive MAC enable bit can be set 
(EMACO_MRO[RXE] = 1). 


A reset (soft or hard) should be issued before programming EMAC to WOL mode. When programmed 
to WOL mode, EMAC does not propagate any received packet to MAL. Also, EMAC transmit channels 
do not request data from MAL. 


19.5 Flow Control 


EMAC implements full-duplex flow control for efficient system performance by handling specific MAC 
control packets contained in the pause opcode. EMAC supports flow control as defined in the IEEE ~ 
802.3x-1997 standard. 


19.5.1 MAC Control Packet 


The flow control mechanism allows the Receive FIFO control logic to automatically notify the node 
transmitting packets to suspend its transmission for a defined period of time. The pause control 
packet has a fixed length defined as follows: 


MinFrameSize—32 bits (60 bytes) 


MAC control packets have a unique value of 0x8808 in the length/type field, and share the same 
packet format as normal Ethernet packets, except that the data field consists of an opcode field anda 
parameter field. The opcode field contains an opcode command and the parameter field contains a 
value associated with the opcode command (0x0001). The only opcode command defined by IEEE 
802.3x is the Pause opcode; the parameter field for the Pause opcode defines the pause time. MAC 
control packets with the Pause opcode, also called pause packets, can have a destination address 
equal to a reserved multicast address, or can be the address of the receive station itself. The 
reserved multicast address is 0x0180C2000001. 
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Figure 19-8 illustrates the contro! packet format. 


Preamble - Alternating zeroes and ones (7 bytes) 

SPD (Start Of Packet Delimiter), 1 byte 

DA (Destination Address) = 0x0180C2000001 

SA (Source Address) = Universally Administered Address (UAA) 
Length/Type = 0x8808 

Opcode Field = 0x0001 

Timer Value Field = PauseValue 

Reserved = zeroes (42 bytes) 

FCS = calculated FCS 


Figure 19-8. Control Packet Format 


The timer value field contains the value of the delay interval in resolution of pause_quanta, defined in 
IEEE 802.3x as follows: “MAC Control Parameter[s] (pause_time) is a 2-octet, unsigned integer 
containing the length of time for which the receiving station is requested to inhibit data packet 
transmission. The field is transmitted most-significant octet first, and least-significant octet second. . 
The pause_time is measured in units of pause_quanta, equal to 512 bit times. The range of possible 
pause_time is 0 to 65535 pause_quanta.” 


19.5.2 Control Packet Transmission 


There are two options to initiate the transmission of a pause packet from EMAC. The transmitted 
pause packet will force the node, with the destination address specified, to temporarily suspend the 
transmission of packets to EMAC. 


¢ Option 1 


Software initiated. The packet transferred to EMAC by MAL for transmission is a pause packet 
created by software. EMAC transmits this as a normal packet. 


¢ Option 2 


Automatic flow control initiated. The EMAC integrated flow control mechanism detects the need for 
and then transmits a contro! (pause) packet automatically. When building the control packet, EMAC 
obtains the SA (source address) field from the Individual Address Registers (EMACO_IAHR and 
EMACO_IALR), and the timer value from the Pause Timer Register (EMACO_PTR[TVF]). The 
contents of the other fields in the packet are represented in Figure 19-8. 


19.5.3 Integrated Flow Control 


To enable integrated flow control in full-duplex mode, set EMACO_MR1[EIFC] = 1. When the receive 
FIFO reaches a predefined threshold level (called a high water mark and specified by 
EMACO_RWMR[RHW\M)), an internal request for control (pause) packet transmission is activated. 
EMAC sends a control (pause) packet when a new packet enters the Receive FIFO and the number 
of vacant entries in the Receive FIFO is less than the high water mark. When the Receive FIFO 
reaches another predefined threshold level (the low water mark, specified by 
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EMACO_RWMR[RLWM)), a new internal request for a pause packet transmission, with a zero pause 
timer value, is activated. EMAC sends a pause packet, with a zero pause timer value, only once, and 
only if a pause packet with a non-zero value in the pause timer was transmitted earlier. 


To MAL 
Receive FIFO 
Low Water Mark 
Packet 0 
Launch Pause 
Packet 1 
Packet 
Packet n 
High Water Mark 


From Ethernet MAC Sub-block 


Figure 19-9. Integrated Flow Control Mechanism 


19.5.4 Control Packet Reception 


In the receive path, EMAC can be configured to respond to pause packets, or ignore them, as 
specified by the allow pause packet bit in Mode Register 1 (EMACO_MR1[APP]). When response to 
pause packets is enabled and EMAC detects a valid MAC contro! packet with a Pause opcode, EMAC 
stores the value of the Timer Value field. The received packet is considered a valid control packet only 
if no error was detected during the packet reception. If, at the end of packet reception, the packet is 
considered valid, EMAC launches a pause operation state machine, as specified in the IEEE P802.3x 
standard. Figure 19-10 on page 19-18 illustrates the pause operation state machine. 


If a control (pause) packet is received while another packet is being transmitted, the ongoing 
transmission process is completed and the transmitter is paused. If other packets are in the Transmit 
FIFO, their transmission is delayed until the pause timer has expired. EMAC normally does not pass 
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the MAC control packets to MAL unless the Propagate Pause Packets bit is set in the Receive mode 
(EMACO_RMR[PPP] = 1). 


Valid Control (Pause) packet is detected 


Wait for transmission completion 


Figure 19-10. Pause Operation State Machine 


Currently ongoing transmit is completed without interruption 


Wait for Pause Counter expiration 


Open the transmit path 


In the Pause Function state, EMAC decrements its internal pause timer, which was set to the Timer 
Value field of the received control packet. 


Note 1: The transmission of control (pause) packets is not affected by the reception of a receive 
control (pause) packet. Received control (pause) packets inhibit only the transmission of 
regular packets from the Transmit FIFO. 


Note 2: Receipt of a new valid control (pause) packet causes the pause timer of EMAC to be 
reloaded with the contents of Timer Value field of the recently received packet, regardless of 
the current pause timer setting. This indicates new pause operations take precedence over 
earlier pause operations. 


19.6 VLAN Support 
EMAC can handle VLAN tagged packets, as specified in IEEE Draft P802.3ac/D1.0a standard when 
EMACO_MR1[VLE] = 1. 


A Tagged MAC Frame is an extension of the standard MAC packet. The extension for VLAN tag 
support consists of a 4-octet VLAN tag inserted between the end of the Source Address and the 
beginning of the Length/Type fields of the MAC packet. 


The VLAN tag consists of two fields: 
¢ A 2-octet constant Type field value equal to the VLAN Tag Protocol Identifier (0x8100) 
¢ A 2-octet field containing Tag Control Information (TCl) 


The MAC Client Data and FCS fields of the basic MAC packet follow the VLAN tag. The length of the 
packet is extended by four octets by the VLAN tag (up to 1522 bytes). The FCS is calculated over all 
fields from the Destination Address through the end of the MAC client data or Pad (if present); that is, 
all fields except the preamble, SPD, and FCS. 
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Figure 19-11 illustrates the Tagged MAC Frame format. 


Preamble — Alternating Os and 1s (7 bytes) 
SPD (Start Of Packet Delimiter) 1 MA: 


DA (Destination ale 6 oe 
SA (Source Address) 6 bytes 
TPID (Tag Protocol Identifier, 2 bytes) = 0x8100 


TC! (Tag Control Information) 2 bytes 


Length/Type 2 bytes 
Data (4204500 bytes) 


Pad (Optional field) 
FCS — Calculated FCS 


Figure 19-11. Tagged MAC Packet Format 
Figure 19-12 illustrates the structure of the TCI field. 


7 6 5 3 0 
CFI VLAN Identifier First Octet 
7 0 
VLAN Identifier Second Octet 


CFI is a Canonical Format Indicator (always 1 for Ethernet media) 


Figure 19-12. Tag Control Information Field Structure 


19.6.1 VLAN Tagged Packet Transmission 


When EMACO_MR1 [VLE] = 1, the following configuration options are available, depending on the 
content of the appropriate bits in the MAL contro! word (see section 19.3.3.1, "MAL TX Descriptor 
Control/Status Field," on page 7): 


¢ The Generate FCS bit (bit 6) is not set or both Insert VLAN Tag and Replace VLAN Tag bits (bits 10 
and 11, respectively) are not set: EMAC transmits the packet without any changes 


¢ Bit 6 is set and bit 10 is also set: EMAC will insert TPID and Tag control information for the 
transmitting packet using the content of EMACO_VTPID and EMACO_VTCI, respectively 


¢ Bit 6 is set and bit 11 is also set: EMAC will replace TPID and Tag control information for the 
transmitting packet using the content of EMACO_VTPID and EMACO_VTCI, respectively 


19.6.2 VLAN Tagged Packet Reception 


If EMACO_MR1[VLE] = 1, EMAC parses the VLAN Tag unique type/length in the incoming packet 
during the receive process. If the VLAN Tag is equal to the value stored in the EMACO_VTPID, EMAC 
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continues the receive process and allows the received packet to contain up to 1522 octets. Otherwise, 
the receive process is continued unless the length is greater than 1518 bytes. 


19.6.3 Address Match Mechanism 


The address match (or filtering) mechanism is a hardware aid that reduces the average amount of 
CPU cycles required to determine whether an incoming packet should be accepted. 


EMAC uses various address filters for incoming packets by using the following address recognition 
modes. 


¢ Individual mode (also referred to as physical) 
¢ Multicast mode (also referred to as group) 

¢ Broadcast mode (an all-ones group address) 
e Promiscuous mode 

¢ Promiscuous multicast mode 

¢ WOL mode 


A flowchart for address recognition of received packets is shown in Figure 19-13 on page 19-22. If the 
least significant bit (LSb) of the first byte of the destination address (DA) is 0, the packet is considered 
individual. If the first bit received is 1, the packet is considered multicast. When the DA field contains 
all 1s, the packet is broadcast, a special type of multicast. 


19.6.3.1 Non-WOL Mode 


When EMAC operates in single individual mode (EMACO_RMR[IAE] = 1), the DA of the received 
packet is compared to the physical address stored in the Individual Address High register 
(EMACO_IAHR) and Individual Address Low (EMACO_IALR) register. 


When EMAC operates in multiple individual mode (EMACO_RMR[MIAE] = 1), EMAC performs a 
calculation on the contents of the DA field (logical address filter) to determine whether or not to accept 
the packet. 


When EMAC operates in promiscuous mode (EMACO_RMR[PME] = 1), all properly formed packets 
are received, regardless of the content of the DA field. 


When EMAC operates in multicast promiscuous mode (EMACO_RMR[PMME] = 1), all multicast 
packets are received, regardless of the content of the DA field. 


When EMAC operates in broadcast address mode (EMACO_RMR[BAE] = 1), EMAS performs an 
address compare on received packets with broadcast addresses. 


When EMAC operates in multicast address mode (EMACO_RMR[MAE] = 1), EMAC performs a 
calculation on the contents of the DA field (logical address filter) as in multiple individual mode, in 
order to determine whether or not the packet should be accepted. 


The logical address filter hardware is an implementation of a hash code searching technique 
commonly used by software programmers. The hardware maps the DA of the incoming packet into 
one of the 64 categories that correspond to 64 bits stored in the EMACO_IAHT1—EMACO_IAHT4 or 
EMAC0_GAHT1—EMACO_GAHT4 registers. The hardware accepts or rejects the packet, depending 
on the state of the corresponding bit in the EMACO_IAHT1—EMACO_IAHT4 or EMACO_GAHT1— 
EMACO0_GAHT4 registers that corresponds to the selected category. 
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Figure 19-14 on page 19-23 shows the details of the hardware mapping algorithm. The example 
depicts multiple individual address mode, but with changes can be used for the multicast address 
mode. 


If the most significant bit of an incoming address is a 0, the address is individual and is passed to the 
individual address filter. If the most significant bit of an incoming address is a 1, the address is 
multicast and is passed to the multicast address filter. The individual/multicast address filter is a 64-bit 
mask composed of EMACO_IAHT1—EMACO_IAHT4 or the EMACO_GAHT1—EMACO_GAHT4 
registers (each register contains 16 bits of a 64-bit mask). The incoming address is sent through the 
FCS circuit. After the 48 address bits have gone through the FCS circuit, the high-order six bits of the 
resulting FCS (32-bit CRC) are used to select one of the 64-bit positions in the individual/multicast 
address filter. If the selected filter bit is a 1, the address is accepted. 


Note: The individual/multicast address filter ensures only that there is a possibility that the incoming 
packet belongs to this node. To determine if the packet belongs to the node, the incoming 
individual/multicast address propagated to the main memory is compared by software to the 
list of logical addresses to be accepted by this node. 


For software, the task of mapping an individual/multicast address to one of 64 bit positions requires a 
program that uses the same CRC algorithm to calculate the hash. 
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19.6.3.2 WOL Mode 


In WOL mode (EMACO_MRO[WKE] = 1), EMAC operates only with the broadcast or individual 


address in the destination address field. 


Accept DA address 


; Y 
Promiscuous 


enabled 
2 
N 
Individual Y 


match 
3 


Individual 
hash match 
4 


: Y 
Promiscuous 


multicast 
5 
N 
Broadcast Y 
match 
6 


N 
Y 


N 


i WOL enabled 7 
1 


Individual 
match 
8 


Broadcast 
match 


9 


To WOL Match Discard 
Logic packet 


Detailed Description of Branch Conditions 


1. EMACO_MRO[WKE] = 1. 

2. EMACO_RMR[PME] = 1. 

3 EMACO_RMR{IAE] = 1 and DA matches 
EMACO_IAHR and EMACO_IALR. 

4. EMACO_RMR[MIAE] = 1 and selected Individual 
Address filter bit is a 1. 

5. EMACO_RMR[PMME] = 1 and DA(0) = 1. 

6. EMACO_RMRJBAE] = 1 and DA matches 
Broadcast Address. 

7. EMACO_RMR[MAE] = 1 and selected Multicast 
Address filter bit is a1. 

8. DA(0) = 0 and DA matches EMACO_IAHR and 
EMACO_IALR. 

9. DA(0) = 1 and DA matches Broadcast Address. 


Address 
HIT 


Figure 19-13. Receive Address Recognition Flowchart 


Discard 
packet 
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The example in Figure 19-14 shows that the received individual address maps into category 24, and 
that bit 8 in EMACO_IAHT2 is set. The match indication is activated and the packet should be 
accepted. 


Individual Address Filter 


0 15 16 31 32 47 48 63 
EMACO_IAHT1 EMACO_IAHT2 EMACO_IAHTS EMACO_IAHT4 
16 3116 31 16 31 16 31 
Destination Address 32-Bit Resultant CRC Individual Address Filter 


CRC 
Generator 


[+ 


0 5 0 63 


When Match = 1, Packet is accepted. 


When Match = 0, Packet is rejected. Select 


Match 
Figure 19-14. Ethernet Address Filter Operation 


19.7 EMAC Registers 


This section describes the EMAC registers. The EMAC registers are accessed through the OPB. 
Access to the registers should be word-aligned. 


Table 19-5. EMAC Register Summary 


Power-on 
Register Name Address Reset Value Page 
EMACO_MRO OxEF60 0800 | See description in “Scenario 1” | OxCO000000 | R/W | 19-27 
on page 19-45 
EMACO_MR1 OxEF600804 el 0x00000000 19-25 
EMACO_TMRO OxEF600808 | See description on page 19-27 | 0x00000000 
EMACO_TMR1 OxEF60080C | See description on page 19-28 | Ox380F 0000 19-28 
EMACO_RMR OxEF600810 Pee. 0x00000000 19-29 
EMACO_ISR OxEF600814 0x00000000 19-30 


Note: Refer to “Power-Up and Initialization” on page 19-44 for definitions of letters in the Write Access Mode 
column. 
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Table 19-5. EMAC Register Summary (continued) 


. : . Power-on 
Register Name Address Write Access Reset Value Page 
EMACO_ISER OxEF600818 (cc) 0x00000000 19-33 
EMACO_IAHR OxEF60081C | Reset, R, T 0x00000000 19-35 
EMACO_IALR OxEF600820 0x00000000 19-36 
EMACO_VTPID OxEF600824 | Reset, R, T 0x00008808 19-36 
EMACO_VTCI xEF600828 | Reset, R, T 0x00000000 19-36 


0 
ee ee ee ee 
ee ee 
ee ee ee 


Note: Refer to “Power-Up and Initialization” on page 19-44 for definitions of letters in the Write Access Mode 
column. 


— — hb 
©; of ©o 
ol al a 
NJ oN] oN 
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19.7.1 Mode Register 0 (EMACO_MRO) 


EMACO_MRO defines the operating modes of the EMAC that can be changed at any time during 
EMAC operation. 


RXI SRST RXE 


TX| TXE WKE 


Figure 19-15. Mode Register 0 (EMACO_MR0O) 


Receive MAC Idle Read-only 
0 RX MAC processing packet 
1 RX MAC idle; RX packet processing 

complete 


Transmit MAC Idle Read-only 
0 TX MAC processing packet 


1 TX MAC idle; TX packet processing 
complete 


Soft Reset ‘If EMACO_MRO[SRST] = 1, writing to any 
0 No effect EMAC register, and reading any other bit in 


Transmit MAC Enable 


0 TX MAC is disabled 
1 TX MAC is enabled 


Receive MAC Enable 
0 RX MAC is disabled 
1 RX MAC is enabled 
Wake-Up Enable Software can change EMACO_MRO[WKE] 


0 Incoming packets are not examined for only while EMACO_MRO[RXI] = 1 and 
wake-up packet EMACO_MRO[RXE] = 0. 


1 Examine incoming packets for wake-up 
packet 


6:31 ioe Reserved 


19.7.2 Mode Register 1 (EMACO_MR1) 
EMACO_MRi defines the EMAC operating modes that can be changed only after a reset. - 


Software can use EMACO_MR1[FDE] and proper programming of the attached PHY to activate 
external loop-back mode. 


When EMACO_MR1[FDE, ILE] = 1, EMAC wraps transmitted packets back to the receive FIFO 
without accessing the MII interface. . 


Preliminary : Ethernet Media Access Controller 19-25 


FDE VLE APP MF RFS TFS TR1 


19628 


Olt 213] 4TSE] 7B 810 Te Teas elt 18H 


ILE EIFC IST TRO 


Figure 19-16. Mode Register 1 (EMACO_MR1) 


Full-Duplex Enable 
0 Disable simultaneous transmit and 
receive 


1 Enable simultaneous transmit and 
receive 


Internal Loop-back Enable Full Duplex must also be set 
0 No wrap back (EMACO_MRI[FDE]=1). 
1 Transmitted packets wrapped back to 

receive FIFO 


VLAN Enable 
0 Disable processing of VLAN Tags 
1 Enable processing of VLAN Tags 


Enable Integrated Flow Control Refer to “Flow Control” on page 19-15 for 
0 Disable integrated flow control more details. 

mechanism Set EMACO_MR1[EIFC] = 0 in half-duplex 
1 Enable integrated flow control mode. 

mechanism 


Allow Pause Packet 

0 Disables processing of incoming control 
(pause) packets 

1 Enables processing of incoming control 
(pause) packets 


25 Reserved Always zero 


Ignore SQE test EMACO_MRi1[IST] = 0 only during half- 
0 Wait for end of SQE test period before duplex operation on 10 Mbps media. 
activation of valid signal 
1 Do not wait for end of SQE test period 
before activation of valid signal 


Medium Frequency Defines the possible operational frequency 
00 10 Mbps (Ethernet mode) on the Mil interface. 

01 100 Mbps (Fast Ethernet mode) 

10 Reserved 

11 Reserved 


Receive (RX) FIFO Size 
00 512 bytes 

01 1KB 

102KB 

114KB 
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12:13 | TFS Transmit (TX) FIFO Size 


00 Reserved 
011KB 
102KB 
11 Reserved 


Reserved Always zero 


ee 
15:16 | TRO Transmit Request 0 Defines the different modes for using 
00 Single packet transmit channel 0 of EMAC. 
01 Multiple packets 
10 Dependent mode (bits 17:18 must also 
be programmed to 10) 
11 Reserved 


17:18 | TR1 Transmit Request 1 Defines the different modes for using 
00 Single packet transmit channel 1 of EMAC. 
01 Multiple packets 
10 Dependent mode (bits 15:16 must also 
be programmed to 10) 
11 Reserved 


}19:31 | | Reserved 


19.7.3 Transmit Mode Register 0 (EMACO_TMRO) 


EMACO0O_TMRO defines EMAC operating modes during transmit operations (see “EMAC Transmit 
Operation” on page 19-5). 


EMACO_TMRO[GNPO, GNP1, GNPD)] are self-clearing. Writing 0 to these fields has no effect. 


GNPOGNFD 


Figure 19-17. Transmit Mode Register 0 (EMACO_TMR0O) 


Get New Packet 0 EMACO_TMRO[GNPO] = 0 if EMAC is 
0 Writing 0 has no effect. programmed in dependent mode. 


1 Packet ready for transmission on TX 
Channel 0 


Get New Packet 1 EMACO_TMRO[GNP'1] = 0 if EMAC is 
0 Writing 0 has no effect. programmed in dependent mode. 


1 Packet ready for transmission on TX 
Channel 1 


Get New Packet for Dependent Mode EMACO_TMRO[GNPD] = 0 if EMAC is not 

0 Writing 0 to this bit has no effect programmed in dependent mode. 

1 Packet ready for transmission in EMACO_TMRO[GNPD] = 1 activates the 
dependent mode EMAC transmit path in dependent mode. 
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First Channel EMACO0_TMRO[FC] is only meaningful in 


0 Activate TX Channel 0 first when GNPD dependent mode, after resetting 
is 1 EMACO_ISR[DBDN]. 


1 Activate TX Channel 1 first when GNPD .EMACO_TMRO[FC] = 0 if EMAC is not 
is 1 programmed in dependent mode. 


A 


19.7.4 Transmit Mode Register 1 (EMACO_TMR1) 


EMACO_TMRi defines conditions for activation of MAL service requests during transmit operations 
(see “EMAC Transmit Operation” on page 19-5). ; 


19.7.4.1 Low-Priority Requests 


EMAC requests low priority service from MAL when the number of vacant entries in the TX FIFO 
exceeds the decimal TLR value. 


EMACO_TMR1[TRL] must at least equal ((MAL Burst Limit / 2)-1). For example, if MAL supports 16- 
word bursts, the decimal TLR value should be at least 7. 


Note: In the 405GP, all MAL channels are capable of 16 word bursts. 


To avoid a deadlock, the sum of EMACO_TMR1[TRL] and EMACO_TRTR[TRT] must be at least 4 
smaller than the transmit FIFO size specified by EMACO_MRI1[TFS]. - 


19.7.4.2 Urgent-Priority Requests 
EMAC requests urgent priority service from MAL if the following conditions occur: 


¢ EMAC begins transmitting the packet to the media before the entire packet is placed in the TX 
FIFO 


e The number of vacant entries for the currently transmitting packet exceeds the decimal TUR value 


Software must coordinate the value of EMACO_TMR1[TUR] with the value of EMACO_MR1[TFS]. The 
value of EMACO_TMR1[TUR] must be smaller than that of EMACO_MR1[TFS] so that the array 
address encoded in EMACO_TMR1[TUR] can access the full 66-bit wide array. 


The binary value of EMACO_TMR1[TUR] must be greater than that of EMACO_TMR1[TLR]. 
The EMACO_TMRi1 contents can be changed only when EMACO_TMRO[GNPO, GNP1, GNPD] = 


TUR 


_ Figure 19-18. Transmit Mode Register 1 (EMACO_TMR1) 


[04 | TLR | Transmit Low Request 
[resend 
TUR Transmit Urgent Request 
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19.7.5 Receive Mode Register (EMACO_RMR) 
The EMACO_RMR defines EMAC operating modes during receive operations. 


SP RRP ROP PPPPMME MIAE MAE 


9] 1] 2] 3] 4] 5] 6] 7/8} 9] 10] 17] 12) 13 


SFCS RFP RPIR PME IAE- BAE 


Figure 19-19. Receive Mode Register (EMACO_RMR) 


Strip Padding 

0 Do not strip pad bytes from the received 
packet. 

1 Strip pad/FCS bytes from the received 
packet. . 


Strip FCS 

0 Do not strip FCS bytes from the received 
packet. 

1 Strip FCS bytes from the received 
packet. 


Receive Runt Packets 

0 Discard packets less than 64 bytes in 
length. 

1 Receive packets less than 64 bytes in 
length. 


Allow Receive Packets with a FCS Error 
0 Discard packets containing a FCS error. 


1 Receive packets containing a FCS error. 


Receive Oversize Packet 

0 Discard packets that activate Packet Is 
Too Long error. 

1 Receive packets that activate Packet Is 
Too Long error. 


Receive Packets with In Range Error 

0 Discard packets that activate In Range 
Error. 

1 Receive packets that activate In Range 
Error. 


Propagate Pause Packet 

0 Do not propagate incoming pause packet 
to MAL; remove packet from FIFO. 

1 Propagate incoming pause packet to 
MAL. 
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Promiscuous Mode Enable 
0 Do not enable promiscuous mode. 
1 Accept all packets. 


Promiscuous Multicast Mode Enable 
0 Do not accept all multicast packets. 
1 Accept all multicast packets. 


Individual Address Enable 

0 Do not compare address of received 
packets with content of individual 
address register. 

1 Compare address of received packets 
with content of individual address 
register. 


Multiple Individual Address Enable 

0 Do not compare address of received 
packets with hash table of individual 
addresses. 

1 Compare address of received packets 
with hash table of individual addresses. 


Broadcast Address Enable 

0 Do not compare address of received 
packets with broadcast addresses. 

1 Compare address of received packets 
with broadcast addresses. 


Multicast Address Enable 

0 Do not compare address of received 
packets with multicast addresses. 

1 Compare address of received packets 

_ with multicast addresses. 


Reserved 


19.7.6 Interrupt Status Register (EMACO_ISR) 


EMAC generates one distinct interrupt event indication. The event indication is driven out of the 
EMAC to the UIC Interrupt 15. This interrupt is generated from the content of the EMACO_ISR. The 
content of the EMACO_ISR is first ANDed with the corresponding mask bits in the EMACO_ISER; the 
resulting bits are then logically ORed to produce the interrupt signal. Thus, if any of the resulting bits 
is a 1, an interrupt is generated. 


Note: EMAC activates its interrupt signal only after an indication that status for the current packet 
was accepted by MAL (with the exception of “MMA Operation Succeed/MMA Operation 
Failed,” which causes unconditional activation of interrupt, if it is not masked). 


The interrupt indication is cleared by writing 1 to the related bit in the EMACO_ISR; writing 0 has no 
effect. 


The Event Indication Signal is cleared when all non-masked event indication bits are cleared. 


19-30 PPC405GP User’s Manual Preliminary 


OVR BP SE BFCS ORE | DBDM SEO DB1_ TE1 MOF 


[oO SJ 6] 7[ Bf of tojaifiajisiiafis]ie 21] 22/23) 24] 25) 26) 27/28] 29] 30/31) 


PP RP ALE PTLE IRE DBO TEO SE1 MOS 


Figure 19-20. Interrupt Status Register (EMACO_ISR) 


Overrun 

0 No overrun error 

1 Overrun error during reception of recent 
packet 


Pause Packet 

0 Received packet is not a control pause 
packet 

1 Received packet is a control pause 
packet 


Bad Packet 

0 Receive operation OK 

1 Early termination was initiated because 
of a packet error 


Runt Packet Set when EMACO_RMR[RRP] = 1 and the 

0 No Runt packets received duration of PHY_RX_DV signal was 

1 Runt packet received greater than ShortEventMaxTime constant 
and less than the collision window. 


Short Event 


0 No short events 
1 Duration of PHY_RX_DV signal less than 
ShortEventMaxTime constant 


Alignment Error The packet contained an odd number of 
0 No alignment error in received packet nibbles (4 bits). 
1 Alignment error in received packet 


Bad FCS Set if EMACO_RMR[RFP] = 1. 
0 No FCS error in received packet 
1 Packet with an FCS error received 


Packet Too Long Error Set if EMACO_RMR[ROP] = 1 and the 
0 No oversized packets received received packet length exceeded the 
1 Oversized packet received maximum allowed value: 

* 1518 octets for standard packet (checked 
only if the length/type field of the trans- 
mitted packet contained length value and 
jumbo support is disabled) 

e 1522 octets for VLAN tagged packet 
(checked only if the length/type field of 
the transmitted packet contained length 
value and jumbo support is disabled) 
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DBDM 


Out Of Range Error 

0 Received packet length field value OK 

1 Received packet length field value 
greater than the maximum allowed LLC 
data size 


In Range Error 

0 Received packet does not contain an In 
Range Error 

1 Received packet contains an In Range 
Error 


Reserved 


Dead Bit Dependent Mode 

0 No transmit error or SQE in dependent 
mode 

1 Transmit error or SQE has occurred 
while in dependent mode 


Dead Bit 0 

0 No transmit error or SQE for TX Channel 
0 while not in dependent mode 

1 Transmit error or SQE has occurred for 
TX Channel 0 while not in dependent 
mode 


SQE Error 0 

0 No SQEs on TX Channel 0 

1 SQE test failure during transmission of a 
packet from TX Channel 0 


Transmit Error 0 
0 TX Channel 0 transmission OK 
1 TX Channel 0 transmission aborted 


Dead Bit 1 

O No transmit error or SQE for TX Channel 
1 while not in dependent mode 

1 Transmit error or a SQE has occurred for 
TX Channel 1 while not in dependent 
mode 


SQE Error 1 

0 No Signal Quality Errors on TX Channel 
1 

1 Signal Quality Error test failure during 
transmission of a packet from TX 
Channel 1 
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Indicates that received packet has a length 
field value greater than the maximum 
allowed Logical Link Control (LLC) data 
size (greater than 1500 and less than 
1536). 


lf EMACO_ISR[DBDM] = 1, EMAC does 
not request MAL service, even if 
EMACO_TMRO[GNPD] = 1. 
EMACO_ISR[DBDM] does not affect 
EMC_INT. 


If EMACO_ISR[DBO] = 1, EMAC does not 
request service for TX Channel 0 from 
MAL, even if EMACO_TMRO[GNPO] = 1. 
EMACO0_ISR[DBO] does not affect 
EMC_INT. 


Applicable only in half-duplex mode during 
10 Mbps operations; 0 in all other modes. 


EMAC aborts the transmitted packet if one 
of the following events takes place: 

¢ Late collision detection 

* Excessive collision detection 

¢ Excessive deferral 

° TX FIFO underrun 

¢ Loss of carrier sense 


If this bit is set, EMAC does not request 
MAL service for TX Channel 1 even if 
EMACO_TMR1[GNP1] = 1. 
EMACO0_ISR[DB1] does not affect 
EMC_INT. 


Applicable only in half-duplex mode during 
10 Mbps operations; 0 in all other modes. 
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Transmit Error 1 EMAC aborts the transmitted packet if one 
O TX Channel 1 transmission OK of the following events takes place: 
1 TX Channel 1 transmission aborted ¢ Late collision detection 
* Excessive collision detection 
¢ Excessive deferral 
, ¢ TX FIFO underrun 
¢ Loss of carrier sense 


Reserved Always 0 
ee is 


MMA Operation Succeeded The device driver should poll assertion of 

0 MMA_CONTROL addressed on the OPB ~EMACO_ISR[MOS] or EMACO_ISR[MOF] 

41 PHY transfer valid before issuing a new command or before 
using data read from the PHY. 


MMA Operation Failed The device driver should poll assertion of 

0 MMA_CONTROL addressed on the OPB + EMACO_ISR[MOF] or EMACO_ISR[MOS] 

1 PHY transfer not valid before issuing a new command or before 
using data read from the PHY. 


19.7.7 Interrupt Status Enable Register (EMACO_ISER) 
The EMACO_ISER indicates which conditions in the EMACO_ISR can generate an interrupt. 


Each masking bit in the EMACO_ISER corresponds to a related bit in the EMACO_ISR. If a mask bit is 
set to 1, the corresponding status bit, when set, causes an interrupt to be generated. Setting a mask 
bit to O suppresses interrupt generation for the associated condition. 


Mask bits for reserved bits in the EMACO_ISR are not implemented, have no effect on write, and 
return 0 on read. 
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Figure 19-21. Interrupt Status Register (EMACO_ISER) 


Overrun 

O Overrun error will not generate an 
interrupt. 

1 Overrun error will generate an interrupt. 


Pause Packet 


0 Received control pause packet will not 
generate an interrupt. 

1 Received control pause packet will 
generate an interrupt. 
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Bad Packet 

0 Early termination on received packet will 
not generate an interrupt. 

1 Early termination on received packet will 
generate an interrupt. 


Runt Packet 

0 Received runt packet will not generate an 
interrupt. 

1 Received runt packet will generate an 
interrupt. 


Short Event 

0 Short event during receive will not 
generate an interrupt. . 

1 Short event during receive will generate 
an interrupt. 


Alignment Error 

0 Alignment error in received packet will 
not generate an interrupt. 

1 Alignment error in received packet will 
generate an interrupt. 


Bad FCS 

0 FCS error in received packet will not 
generate an interrupt. 

1 FCS error in received packet will 
generate an interrupt. 


Packet Too Long Error 

0 Oversized packets received will not 
generate an interrupt. 

1 Oversized packet received will generate 
an interrupt. 


Out Of Range Error 

O Out of range error on received packet will 
not generate an interrupt. 

1 Out of range error on received packet will 
generate an interrupt. 


In Range Error 

0 In range error on received packet will not 
generate an interrupt. 

1 In range error on received packet will 
generate an interrupt. 


_ | Reserved 


SQE Error 0 

0 SQE error on TX Channel 0 will not 
generate an interrupt. 

1 SQE error on TX Channel 0 will generate 
an interrupt. 
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TEO Transmit Error 0 
0 TX error on TX Channel 0 will not 
generate an interrupt. 
1 TX error on TX Channel 0 will generate 
an interrupt. 
a 
27 SE1 SQE Error 1 
0 SOE error on TX Channel 1 will not 
generate an interrupt. 
1 SQE error on TX Channel! 4 will generate 
an interrupt. 
28 TE1 Transmit Error 1 ; 
0 TX error on TX Channel! 1 will not 
generate an interrupt. 
1 TX error on TX Channel 1 will generate 
an interrupt. 


MMA Operation Succeeded 

0 Successful MMA Operation with a PHY 
will not generate an interrupt. 

1 Successful MMA Operation with a PHY 
will generate an interrupt. 


MMA Operation Failed 

0 Unsuccessful MMA Operation with a 
PHY will not generate an interrupt. 

1 Unsuccessful MMA Operation with a 
PHY will generate an interrupt. 


19.7.8 Individual Address High (EMACO_IAHR) 
EMACO_IAHR contains the high-order halfword of the station unique individual address. 


During packet reception, if EMAC is programmed in individual address match mode 
(EMACO_RMRIAE] = 1), the contents of EMACO_IAHR are concatenated with the content of 
EMACO_IALR to form a composite address that is compared with the destination address of the 
received packet. If addresses match, the packet is transferred to MAL. 


During packet transmission, EMACO_IAHR is used in source address inclusion/replacement and as 
the source address field in the self-assembled control (pause) packet. 


Figure 19-22. Individual Address High Register (EMACO_IAHR) 


High-order halfword of the station unique This field contains bits 0:15 of the 
individual address destination address (bit 0 is the most 
significant bit). 


- x 
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19.7.9 Individual Address Low (EMACO_IALR) 
EMACO_IALR contains the low-order word of the station unique individual address. 


During packet reception, EMACO_IALR is compared with the corresponding address bits of the 
received packet. 


During packet transmission, EMACO_IALR is used in source address inclusion/replacement and as 
the source address field in the self-assembled control (pause) packet. 


Figure 19-23. Individual Address Low Register (EMACO_IALR) 
0:31 Low-order bits of Receive Individual 
Address or Transmit Source Address 


19.7.10 VLAN TPID Register (EMACO_VTPID) 
EMACO_VTPID contains the value of the VLAN TPID (Tag Protocol Identifier) field. 


During packet reception, packet bytes 13 and 14 are compared to the content of this register to check 
whether the packet is tagged with a VLAN ID. 


During packet transmission, EMAC uses EMACO_VTPID when VLAN Tag replacement or VLAN Tag 
inclusion mode is chosen. 


The value of this register must be a Type field (8100). 


VIDT 


Figure 19-24. VLAN TPID Register (EMACO_VTPID) 
| Reserved 


19.7.11 VLAN TCI Register (EMACO_VTCI) 
EMACO_VTCI contains the value of the VLAN TCI (Tag Control Information) field. 


During packet transmission, EMAC uses EMACO_VTCI when VLAN Tag replacement or VLAN Tag 
inclusion mode is chosen. 


19-36 PPC405GP User’s Manual Preliminary 


VTCl 


0 151/16 31 


Figure 19-25. VLAN TCI Register (EMACO_VTCI) 


i 


19.7.12 Pause Timer Register (EMACO_PTR) 


The EMACO_PTR defines the time period for which the pause function is enabled. EMAC uses 
EMACO_PTR[TVR] as the timer value field of control (pause) packets (see “Control Packet 
Transmission” on page 19-16). Each bit corresponds to 512 bit times. 


TVF 


Figure 19-26. Pause Timer Register (EMACO_PTR) 


ee Fee [Rewed 


19.7.13 Individual Address Hash Tables 1-4 (EMACO_IAHT1—EMACO0O_IAHT4) 
These registers are used in the hash table function of the multiple individual addressing mode. 


See “Address Match Mechanism” on page 19-20 for more information. See Figure 19-14 on page 
19-23 for bit mapping information. 


0 Pay es 15116 31 


Figure 19-27. Individual Address Hash Tables 1—4 (EMACO_IAHT1—EMACO_IAHT4) 


pers Tf Resend 
16:31 he Individual Address Hash Number 


19.7.14 Group Address Hash Tables 1-4 (EMACO_GAHT1—EMAC0O_GAHT4) 
These registers are used in the hash table function of the group addressing mode. 


See “Address Match Mechanism” on page 19-20 for more information. See Figure 19-14 on page 
19-23 for bit mapping information. 
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19.7.15 Last Source Address High (EMACO_LSAH) 


EMACO_LSAH contains the high-order halfword of the source address of the last “good” received 
packet. The packet is considered to be “good” if EMAC is programmed to provide this packet to MAL. 


15) 16 31 


Figure 19-29. Last Source Address High Register (EMACO_LSAH) 


0 
[ems [Resend 
16:31 he a Last Source Address High-Order Halfword 


19.7.16 Last Source Address Low (EMACO_LSAL) 


EMACO_LSAL contains the low-order word of the source address of the last “good” received packet. 
The packet is considered “good” if EMAC is programmed to provide this packet to MAL. 


Figure 19-30. Last Source Address Low Register (EMACO_LSAL) 


‘| 0:31 le ce al Last Source Address Low-Order Word 


19.7.17 Inter-Packet Gap Value Register (EMACO_IPGVR) 


EMACO_IPGVR contains the value of one-third of the inter-packet gap (IPG) for the next packet to be 
transmitted. (“Frame” is synonymous with “packet.”) 


The resolution of each bit is 8-bit times. The minimum value in the register is four, causing a minimum 
IPG period of 96-bit times). 
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0 25] 26 31 


Figure 19-31. inter-Packet Gap Value Register (EMACO_IPGVR) 


eae [frees 
fesat | [merreseGie 


19.7.18 STA Control Register (EMACO_STACR) 


The EMACO_STACR controls the MIl Management interface. The software must follow the following 
steps during access to the EMACO_STACR: 


1. Software polls EMACO_STACR[OC], waiting for it to be set by EMAC. 
EMAC sets EMACO_STACR[OC] = 0 when the EMACO_STACR is written to. 


EMAC then sets EMACO_STACR[OC] = 1 to indicate that the data has been written to the PHY, or 
the data read from the PHY is valid. The device driver should poll for EMACO_STACR[OC] = 1 
before issuing a new command, or before using data read from the PHY. 


2. The software can perform read/write access to the EMACO_STACR. 


3. EMAC clears EMACO_STACR[OC] (sets EMACO_STACR[OC] = 0) and starts activity on the Mil 
management interface. 


a 


. Return to step 1. 


PHYD PHYE OPBC PRA 


B[16[17]18 19]20 222 aT 


OC 


STAC PCDA 


Figure 19-32. STA Control Register (EMACO_STACR) 


PHY data Data to be sent to the PHY if the command 
is a write, or data is read from the PHY if 
the command is a read. 

Operation Complete 

0 EMACO_STACR is addressed 

1 PHY data transfer complete 


PHY Error EMACO_STACR[PHYE] = 0 when a read is 


0 Successful read transaction successful. 
1 Read transaction was not successful 


STA Command EMAC sets EMACO_STACR[STAC] = 0 
00 Reserved when the command is completed. 

01 Read 

10 Write 

11 Reserved 
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OPB Bus Clock Frequency EMACO_STACR[OPBC] is used to 
00 50 MHz generate the Management Data Clock 

01 66 MHz (EMCMDCIk. 

10 83 MHz When the operational frequency differs 

11 100 MHz from those in the list, then the next greater 
, frequency should be chosen. 


20:21 | OPBC 


22:26 |} PCDA | PHY Command Destination Address 
27:31 PHY Register Address _ 


19.7.19 Transmit Request Threshold Register (EMACO_TRTR) 


The EMACO_TRTR defines the conditions that cause EMAC to initiate transmission to the Ethernet 
MAC sub-block, and for requesting service from MAL. 


EMACO_TRTR[TRT] defines the number of occupied entries in the Transmit FIFO that should be 
written before the Transmit FIFO control logic initiates a transmit request to the Ethernet MAC sub- 
block. 


If an entire packet is already located in the Transmit FIFO, then EMAC initiates a transmit regardless 
of the programmed value. 


The software must coordinate the value of EMACO_TRTR[TRT] with the Transmit FIFO size specified 
in EMACO_MRI1[TFS]. 


To avoid deadlock, the sum of the Transmit Low Request (Figure 19-18 on page 19-28, bits 0:4) and 
EMACO0_TRTR[TRT] must be smaller, by at least four, than the chosen size of the Transmit FIFO 
specified in EMACO_MR1[TFS]. 


To avoid an underrun, program this threshold to a high enough value. 


In half-duplex mode, in case of collision, to allow packet re-transmission without involving MAL, EMAC 
’ preserves the necessary space in the Transmit FIFO unless it gets an indication that the collision 
window has elapsed. 


The EMACO_TRTR may only be written to while EMACO_MRO[TXI]] = 1. 


19-40 PPC405GP User's Manual Preliminary 


TRT 
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Figure 19-33. Transmit Request Threshold Register (EMACO_TRTR) 


0:4 TRT Transmit Request Threshold 
The following number of bytes must be 
placed in the Transmit FIFO before 
initiating a transmit request. 
00000 64 bytes 
00001 128 bytes 
00010 192 bytes 
00011 256 bytes 
11111 2048 bytes 


19.7.20 Receive Low/High Water Mark Register (EMACO_RWMR) 


The EMACO_RWMR defines the conditions that cause EMAC to activate a low or urgent priority MAL 
request, and that manage flow control. 


EMAC activates a low priority request if the number of occupied entries in the Receive FIFO is greater 
than or equal to the content of EMACO_RWMR[RLWM] (the receive low water mark is reached). A 
request for a pause packet with a pause_value of 0 is also issued when the receive low water mark is 
reached. 


Software must coordinate the value of EMACO_RWMR[RLW\] with the value of EMACO_MR1[RFS]. 
EMACO_RWMR[RLW\] should be smaller than EMACO_MR1[RFS] and larger than the MAL burst 
length. 


Note: In the 405GP, the MAL burst length is 16 words for all channels. 


If the entire packet is already in the Receive FIFO, EMAC initiates a low priority request regardless of 
the programmed value. 


EMAC activates an urgent priority request if the number of occupied entries in the Receive FIFO is 
greater than or equal to EMACO_RWMR[RHW\M] (the receive high water mark is reached). A request 
for a pause packet is also issued when the receive high water mark is reached. 


Software must coordinate the value of EMACO_RWMR[RHW\] with the value of EMACO_MR1[RFS]. 
EMACO_RWMR[RHWV\] should be greater than the value of EMACO_RWMR[RLWM] and less then 
the size of the Receive FIFO. 
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Figure 19-34. Receive Low/High Water Mark Register (EMACO_RWMR) 


/0:8 | RLWM_ | Receive Low Water Mark 


} 915 fe Reserved 


16:24 | RHWM | Receive High Water Mark 
25:31 | | Reserved 


19.7.21 Number of Octets Transmitted (EMACO_OCTX) 


’ Figure 19-35. Number of Octets Transmitted (EMACO_OCTX) 
0:31 OCTX | Number of octets (bytes) transmitted. This field is Read-Only. 


19.7.22 Number of Octets Received (EMACO_OCRX) 


Figure 19-36. Number of Octets Received (EMACO_OCRX) 
0:31 OCRX | Number of octets (bytes) received. This field is Read-Only. 


19.8 Mil interface 


EMAC implements all MIl interface functionality in accordance with Clause 22 in the IEEE Std. 
802.3u. 


The Mil interface is a Reconciliation Sublayer interface which allows a variety of PHYs to be attached 
to the EMAC Ethernet MAC without future upgrade problems. 
19.8.1 MII Station Management Interface 


The EMAC MIl station management unit (STA) implements a specific protocol and a special packet 
format to exchange management packets with the registers of the attached PHY device. EMAC 
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automatically generates MIl management packets, which conform to Clause 22 in IEEE Std. 802.3u. 
EMAC uses the EMACO_STACR for generation of the management packet. 


EMAC 


EMC_MDC 


PHY_MDIO 
EMC_MDIO 


EMC_MDIO_EN 


Figure 19-37. Management Interface with PHY 


19.8.2 EMAC — MIl Interface 
See PPC405GP Data Sheet for information. 


19.9 MAL — EMAC Packet Transfer Flow 


The packet transfer flow consists of three phases. These three phases are used to define the details 
of the EMAC-MAL protocol. 


1. Packet phase - EMAC initiates a packet transfer operation. The packet transfer is started by a 
command write. During command write MAL provides control information for EMAC on a per- 
packet basis. Following the command write, MAL begins the data transfer, during which MAL 
transfers data between the buffers located in the system’s memory and EMAC. In transmit, the data 
is transferred from the system’s memory to EMAC, while in receive, the data is transferred from 
EMAC to the system’s memory buffers. 


os EMAC remains in the packet phase until the data transfer has been completed or a ready status 
can be returned to MAL. The packet phase ends when EMAC deasserts the FRAME signal 
associated with the related channel (receive/transmit). 


— The packet phase is defined by activity of an appropriate FRAME signal. 


2. Status phase - This is the second phase of the packet transfer. Following the de-assertion of the 
FRAME signal, EMAC switches to the status phase. At this stage, EMAC uses an appropriate 
signal as a request for service which is interpreted by MAL as a request for status read. 


3. Idle phase - EMAC moves into the idle phase following a reset or after status was transferred (end 
of status phase). During the idle phase, EMAC cannot send any signals to MAL, nor can MAL send 
any active signals to EMAC. EMAC exits the idle phase by asserting the FRAME signal (and 
entering the packet phase described above). Idle phase can be skipped when EMAC operates in 
multiple transfer mode. 
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Figure 19-38 illustrates the different phases in the EMAC-MAL communication. 


Frame / \ / 


Packet a Status ' Idle: Packet 


phase phase | phase: phase 
Command Data Status 
write transfer read 


Figure 19-38. EMAC-MAL Communication Phases 


During the packet and status phases EMAC signals a request for service by driving its arbitration level 
signal to a non-idle level. 


19.10 Programming Notes 
Certain combinations in device drivers are not allowed when writing to EMAC registers. When 


creating device drivers, ensure that the following guidelines are used: 


¢ In dependent mode, EMACO_MRi[TRO] must be equal EMACO_MR1[TR1] 


e When internal loopback is enabled (EMACO_MR1[ILE] = 1), EMAC must be configured in full- 
duplex mode (EMACO_MR1[FDE] =1) 


¢ EMACO_MRi[IST] =0 only when EMACO_MR1[MF] = 10 and EMACO_MR1[FDE] =0 
* In dependent mode, EMACO_ISER2425 must equal EMACO_ISER;7.25 

e¢ EMACO_MR1[EIFC] =0 if EMACO_MR1[FDE] =0 

¢ EMACO_TMR1[TLR] must be greater than the MAL burst size in entities (6 for MAL) 


¢ EMACO_TMR1[TUR] must be greater or equal to EMACO_TMR1[TLR] and less than the Transmit 
FIFO size in entries (EMACO_MR1[TFS)) 


¢ To avoid deadlock, the sum of EMACO_TMR1[TLR] and the EMACO_TRTR[TRT] must be at least 
four less than the Transmit FIFO size specified in EMACO_MR1[TFS] 


¢ EMACO_RWMR[RLWN] must be greater than the MAL burst size in entities (six for MAL) 
¢ EMACO_RWMR[RHW\N] must be greater than EMACO_RWMR[RLWM] 
e EMACO_RWMR[RHW\N] must be less than the Receive FIFO size in entities (EMACO_MR1[RFS)) 


19.10.1 Power-Up and Initialization 


19.10.1.1 Reset Options 


The EMAC must be reset before performing configuration changes. The following types of reset 
operations can be applied to EMAC. 
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¢ Hard Reset. When RESET input is asserted, EMAC aborts all on-going activities unconditionally, 
initializes all internal state machines, counters, registers, and flushes transmit and receive FIFOs. 
To be recognized, the reset signal must be asserted for at least two cycles of the slowest clock 
domain inside EMAC (indicating that the hard reset must be at least 800 ns). 


Soft Reset. Software first should reset the appropriate MAL channels and then begin a soft reset by 
setting EMACO_MRO[SRST] = 1. In response to the soft reset, EMAC aborts all on-going activities 
unconditionally, initializes all internal state machines, counters, registers, and flushes transmit and 
receive FIFOs. After EMAC finishes all activities related to the soft reset processing, 
EMACO_MRO[SRST] = 0. 


¢ Smart Reset. The software initializes smart reset mode by writing 0 to EMACO_MRO[TXE] or 
EMACO_MRO[RXE], or to both. In this case, the Ethernet MAC sub-block completes on-going 
activity (receive, transmit, or both) and then goes to the related Idle state (indicated by setting 
either EMACO_MRO[TXI] = 1 or EMACO_MRO[RXI]] = 1, or both). In this case, the control logic sub- 
block of EMAC is still accessible for OPB and MAL transactions. 


Before performing the necessary configuration changes in EMAC, the software must follow one of the 
following scenarios. Then the EMAC can be properly configured. 

19.10.1.2 Scenario 1 

¢ Hard/soft reset was activated. 

¢ During hard/soft reset, EMACO_MRO[TXE] and EMACO_MRO[RXE] are reset. 

¢ Software detects that the EMACO_MRO[SRST] is reset (after soft reset only). 

¢ Software keeps EMACO_TMRO[GNPO, GNP1] = 0. 


e The software can change one or more fields in registers marked with a Reset write access mode in 
Table 19-5, “EMAC Register Summary,’ on page 19-23 (actually, all EMAC registers are accessible 
in this scenario). 


¢ The software initializes EMACO_TMRO[GNPO, GNP1] as appropriate. 
¢ The software configures EMACO_MRO[TXE, RXE]. 


19.10.1.3 Scenario 2 


¢ Software sets EMACO_MRO[TXE] = 0. 


¢ The TXMAC component of the Ethernet MAC sub-block completes on-going activity and then sets 
EMACO_MRO[TXI]] = 1 to enter the related Idle state. 


Software detects EMACO_MRO[TXI] = 1. 


Software performs the necessary EMAC configuration, keeping EMACO_MRO[TXE] = 0. The 
software can access only part of the EMAC registers marked with write access mode T in 
Table 19-5, “EMAC Register Summary,’ on page 19-23. 


¢ After all configuration is done, software can set EMACO_MRO[TXE] = 1. 


Note: When Scenario 2 occurs, EMAC can still receive packets if EMACO_MRO[RXE] = 1. Scenarios 
2 and 3 can occur simultaneously. 
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19.10.1.4 Scenario 3 


Software sets EMACO_MRO[RXE] = 0. 


The RXMAC component of the Ethernet MAC sub-block completes on-going activity and then sets 
EMACO_MRO[RXI] = 1 to enter the related Idle state. 


Software detects EMACO_MRO[RXI] = 1. 


Software performs the necessary EMAC configuration, keeping EMACO_MRO[RXE] = 0. The 
software can access only part of EMAC registers marked with write access mode R in Table 19-5, 
“EMAC Register Summary,’ on page 19-23. 


After all configuration is done, software can set EMACO_MRO[RXE] = 1. 


Note: When Scenario 3 occurs, EMAC can still tansmit packets if EMACO_MRO[TXE] = 1. Scenarios 


2 and 3 can occur simultaneously. 
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Chapter 20. Memory Access Layer 


The Memory Access Layer (MAL) is a hardware core that manages data transfers between packet- 
oriented communications cores, also known as COMMACs (communications media access 
controllers), and memory. In the PPC405GP, MAL manages the transfer of packets between the 
Ethernet Media Access Controller (EMAC) and memory attached to the PPC405GP (SDRAM or 
SRAM). The primary function of MAL is to move packets directly between memory and a COMMAC 
core to minimize involvement of the processor core. 


MAL is comprised of multiple transmit (TX) and receive (RX) channels, each of which is dedicated to 
a specific COMMAC in the chip. In the PPC405GP, the EMAC utilizes MAL TX channels 0 and 1, and 
MAL RX channel 0. 


To communicate with software device drivers, MAL utilizes a buffer descriptor ring structure in 
memory. A software device driver uses the buffer descriptor structure to inform MAL about buffer 
locations and packet or buffer status. MAL uses the buffer descriptors to convey packet transfer status 
from the COMMAC core back to the software device driver. Each MAL channel requires its own buffer 
descriptor table ring structure in memory. 


MAL provides software device drivers a generic interface for control of: 


¢ Configuration sequence 
¢ Activation commands 

¢ Deactivation commands 
¢ Memory status handling 


20.1 MAL Features 


¢ No restrictions on buffer alignment 
¢ Aligned bus accesses to enable burst operation with external memories 
¢ Configurable receive buffer size (configurable per channel) 
¢ No minimum transmit buffer size 
e¢ Maximum buffer sizes of 4095 bytes (TX) and 4080 bytes (RX) 
-¢ Up to 256 descriptors in the buffer descriptor table per channel 
¢ Configures COMMAC according to commands specified in the descriptor status/control field 


¢ Updates the descriptor status/control field at the end of packet transfer according to the status 
received from COMMAC 


¢ Buffer-based interrupt capabilities for each channel 

¢ Concurrent operation of RX and TX channels 

¢ Configuration using Device Control Registers (DCRs) 
¢ Programmable PLB arbitration priority 

¢ PLB/OPB error detection 
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Figure 20-1 illustrates a general system structure overview of an embedded PowerPC processor core 
integrated with a packet oriented communication core. For the PPC405GP, the sole COMMAC is 


EMAC. 
External 
Memory 


SDRAM Controller 
or PPC405 
External Bus Controller Processor Core 


PLB-OPB Bridge 


COMMAC 
(EMAC) 


Transmit Receive 
Channels Channels 


Figure 20-1. General PPC405GP Structure (Overview) 


COMMACs are configured and controlled by the processor core using the OPB without MAL 
intervention. Packet data to be transmitted and received are stored in buffers in external memory. The 
MAL processes buffer descriptors and provides all data access facilities to the COMMACs. 


The MAL is not aware of COMMACs such as EMAC as an entity. It is only aware of the COMMAC's 
channels. In the PPC405GP, EMAC contains two TX channels and one RX channel. Transmit and 
receive operations can be performed simultaneously by MAL (full duplex). When a channel wins 
arbitration, MAL transfers data between system memory and the COMMAC. MAL and the software 
driver maintain separate, dedicated buffer descriptor tables for each channel to maintain channel, 
packet, and buffer status. Packets can be constructed from one data buffer, or several data buffers 
(known as buffer chaining). 
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20.1.1 MAL — Internal Structure 


Figure 20-2 illustrates the MAL internal structure. 
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Figure 20-2. MAL Internal Structure 


20.1.1.1 PLB Master 


The PLB Master performs PLB transactions for MAL, and is used to transfer data between a 
COMMAC and memory, fetch buffer descriptors, and communicate status regarding data transfer. 


20.1.1.2 OPB Master 


The OPB Master performs OPB transactions for MAL, and is used to transfer data between a 
COMMAC and memory. 


20.1.1.3 TX Channel Handler 


The TX channel handler is a dedicated section for each TX channel. It keeps a record of the 
descriptor information and the current state of each channel. 


20.1.1.4 RX Channel Handler 


The RX channel handler is a dedicated section for each RX channel. It keeps a record of the 
descriptor information and the current state of each channel. 
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20.1.1.5 TX Channel Arbiter 


The TX channel arbiter, connected to request lines from each TX channel, arbitrates between the TX 
channels and decides which channel gains access to the TX common channel logic. 


20.1.1.6 RX Channel Arbiter 


The RX channel arbiter, connected to request lines from each RX channel, arbitrates between the RX 
channels and decides which channel gains access to the RX common channel logic. 


20.1.1.7 TX Common Channel Logic 


The TX common channel logic is shared by all TX channels. It services a single TX channel at a time 
(selected by the TX arbiter). This logic activates the PLB and OPB masters for data and buffer 
descriptor transactions. 


20.1.1.8 RX Common Channel Logic 


The RX common channel logic is shared by all RX channels. It services a single RX channel at a time 
(selected by the RX arbiter). This logic activates the PLB and OPB masters for data and buffer 
descriptor transactions. 


20.1.1.9 Register Map File 


The register map file is used to configure MAL and read its status registers. Software accesses the 
MAL register file using the mtder and mfder instructions. 


20.2 Transmit and Receive Operations 


The device driver is responsible for configuring MAL before a COMMAC can begin requesting MAL to 
process packets of data. The device driver should ensure that channels are not enabled during 
reconfiguration; otherwise, fatal errors may occur. 


For more information about the MAL software interface, see “MAL Programming Notes” on 
page 20-18. 
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Figure 20-3 describes the software and hardware operations involved in a typical transmit operation. 


Protocol ; 
Transmit Buffer Descriptor Table Buffers 


Stack 


CPU (activated 
via “Device Driver’) 


The numbered steps are described as follows: 

1. The protocol stack (high-level software layer) initiates a packet transmit. 
Software device driver parses the protocol stack buffer into descriptor table entries and buffers. 
Software device driver instructs the COMMAC to process a new transmit packet. 
The COMMAC channel requests MAL to process a new packet. 

MAL fetches descriptor information. 


MAL writes control! information into the COMMAC and initiates the data move. 


NO oO F oO DL 


Packet data is transferred from memory into the COMMAC (the COMMAC controls the pace of the 
data transfer). 


8. The packet is transmitted on the media (steps 7 and 8 can overlap). 
9. The COMMAC requests that MAL read the packet status. 
10. The status read by MAL is written back into a buffer descriptor. 


11. Software is interrupted (if interrupt conditions are met) by the COMMAC or by the MAL end-of-buffer 
interrupt. 


12. Software clears the interrupt status bits in the COMMAC and in MAL. 


13. Software informs the protocol stack that transmission is complete. 


Figure 20-3. Transmit Operation 
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Figure 20-4 describes the software and hardware operations when receiving a typical packet. 


Protocol Stack 


Packet t 1 


CPU (activated 
via “Device Driver’) 


The numbered steps are described as follows: 


. Software device driver initializes the receive buffer descriptors. 

. Software device driver enables the COMMAC to process a new packet. 

. A packet is received from the network (steps 2 and 3 can change in order). 
. The COMMAC channel requests that MAL process a new packet. 

. MAL fetches receive buffer information from the descriptor table. 


oOo a fr WO NM = 


. MAL writes the control word from the descriptor to the COMMAC and initiates the data 
transfer. 


7. The COMMAC channel fills its FIFO storage. 
8. MAL stores the packet in system memory buffers pointed to by the descriptors. 
9. MAL reads status information from the COMMAC and writes it to the buffer descriptors. 


10. Software device driver is interrupted (if interrupt conditions are met) by the COMMAC or 
by the MAL end-of-buffer interrupt. 


11. The receive packet is passed to the protocol stack. 
12. Software clears the receive buffer descriptor positions allowing them to be used again. 


Figure 20-4. Receive Operation 


Note: The description in Figure 20-4 is the general scheme for MAL operation in the software 
environment. The device driver should follow recommendations from “MAL Programming 
Notes” on page 20-18. 
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20.3 Buffer Descriptor Overview 


The software interface for buffer descriptor (BD) processing consists of a set of registers within MAL 
and a set of circular queues in memory. Each transmit and receive COMMAC channel has a 
descriptor table that contains buffer location and status information allocated to the channel. 


Note: Since MAL uses a flat addressing scheme on the PLB, the physical memory that holds 
descriptor tables and buffers can be allocated anywhere in the address space where memory 
is possible. Also, it is not necessary to place buffer descriptor tables and buffers in the same 
physical memory. 


During its operation, MAL is able to modify the contents of memory directly without processor core 
knowledge. If the processor core does not provide hardware enforced data cache coherency or data 
cache snooping (the PPC405 CPU core does not), data cache coherency is the responsibility of the 
software device driver. To simplify device driver software, the MAL buffer descriptor tables should be 
placed in non-cached memory when possible. If this is not possible, the software driver must maintain 
cache coherency of the buffer descriptor tables by performing data cache flushes or invalidates when 
appropriate. When descriptors are in cached memory, the driver software must be aware that multiple 
descriptors are present in a single cache line and that cache invalidate or flush operations will be 
performed on multiple descriptors at the same time. This is significant because a cache line flush 
done by the driver to force a descriptor from the data cache to physical memory could corrupt another 
descriptor that occupies the same data cache line and is simultaneously being updated in physical 
memory by MAL. 


Data buffers, in contrast, should be placed in cachable memory if possible. The software driver can 
easily maintain cache coherency of data buffers if: 


¢ All buffers are aligned on a data cache line boundary 
e All buffers are a multiple of a data cache line in size 


Note: The data cache line size and alignment in the PPC405GP is 32 bytes. 


Before using a received packet, the software driver must invalidate the memory occupied by the buffer 
in the data cache for the length specified in the RX buffer descriptor data length field. Before 
transmitting a packet the software driver must flush the data buffer from the data cache before setting 
the Ready bit in the TX buffer descriptor. 


The software device driver fills the buffers pointed to by transmit buffer descriptors with packets to be 
transmitted, and/or provides empty buffers pointed to by receive buffer descriptors to be filled with 
received packets. Meanwhile, the hardware processes the descriptors, transfers the packet data 
to/from the COMMAC, and updates the status fields of the descriptors. 


Each individual transmit or receive channel has its own buffer descriptor table. They are managed 
independently of each other. This section describes the individual transmit and receive interfaces. 


- Packet data associated with each transmit or receive channel is stored in buffers. Each buffer has an 
entry dedicated to it in one of the channel's buffer descriptor tables. MAL has a Channel Table Pointer 
Register for each of its channels. The COMMAC (EMAC in the PPC405GP) device driver sets the 
contents of these registers to point to the starting address of the buffer descriptor table for the 
associated channel. . 


Note: Buffer descriptor tables must start on a 4-KB boundary. 
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The buffer descriptor table forms a circular queue with a programmable length. The last descriptor in 
the table is defined by setting the Wrap bit in the status/control field (see “Status/Control Field 
Format” on page 20-14). If there is no Wrap bit set in the table, then MAL automatically wraps after 
processing 256 descriptors (the maximum number of descriptors allow per channel). 


The format of the buffer descriptor (see Figure 20-5) is the same for all COMMACs, and has the same 
structure for both transmit and receive. The most significant halfword in each buffer descriptor 
contains a status/control halfword. This field contains two parts: the first part (6 bits) is BD handling 
information used by the MAL for descriptor processing, the second field (10 bits) is content specific for 
each COMMAC. The second halfword determines the data length referenced in this buffer descriptor. 
The second word in the buffer descriptor contains a 32 bit data buffer pointer that points to the actual 
data buffer in memory. It is suggested that each data buffer start on a cache line boundary and be a 
multiple of a cache line in size if it resides in cachable memory. (The cache line size in the PPC405 
processor core is 32 bytes.) 


0 15 16 20 31 


Status/Control Data Length 
Data Buffer Pointer 


Figure 20-5. Buffer Descriptor Structure 


Offset + 0 


Offset + 4 


A packet may reside in as many buffers as necessary (transmit or receive). Each buffer has a 
maximum length of (4KB — 16) bytes. In TX channels, the buffer descriptor length field is written by the 
device driver and defines the number of bytes in the data buffer that is identified by the data buffer 
pointer. In RX channels, the buffer descriptor length field is written by MAL and defines the number of 
bytes written by MAL to the buffer that is identified by the data buffer pointer (see “Receive Software 
Interface” on page 20-12). 


When processing a packet, MAL does not assume that all buffers of the current packet are already 
valid. It expects the buffers to be ready in due time to be transmitted or received. Failure of the 
software to provide the descriptors in due time may result in.an error. 
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Figure 20-6 describes the structure of the packet in memory. 


BD Tables (Memory) 


Memory 


Descriptor 0 


MAL BD Table 
Pointer Register 


MAL Channel 3 
Table Pointer 


Data Buffer 


Buffer Pointer : 


*W=1 means the wrap bit is set for this descriptor 


Figure 20-6. Packet Memory Structure 


20.4 Transmit Software Interface 


Once a channel is enabled in MAL (this is done by setting the appropriate bit in the Channel Active 
Register), a channel may request service from MAL. When the first transmit request comes in from a 
COMMAC TX channel, MAL finds the starting address of the buffer descriptor table for the channel by 
looking in the corresponding Transmit Channel Table Pointer Register. If the first descriptor is marked 
as ready, MAL will start processing the associated buffer. 


When MAL begins processing a packet, it writes the contents of the descriptor status/control field into 
the COMMAC. This information, (depending on communication core implementation), may be used by 
the communication core to configure each packet transfer. 


Once all data from the current buffer has been transferred to the communication core on the channel, 
MAL moves on to the next buffer descriptor in the table. 


If a given buffer descriptor indicates that it contains the last section of the current packet, MAL informs 
the channel that the last data transferred to the channel completed the transfer of a data packet. At 
this point, the COMMAC asks MAL to read the packet status. MAL then writes this information back 
into the status/control field of the last buffer descriptor of the packet. 
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The COMMAC channel may request that MAL process the next buffer descriptor and the same packet 
handling process will be initiated. The first descriptor in the next packet follows the descriptor marked 
“last” in the previous packet. 


20.4.1 Wrapping the BD Table for Transmit 


When MAL processes a buffer descriptor (while handling.a packet for a COMMAC channel), it may 
encounter a Wrap indication within a buffer descriptor control field. This causes MAL to go back to the 
beginning of the buffer descriptor table for the next descriptor table entry. (This will also happen when 
MAL reaches the maximum number of descriptors.) The wrapping of the BD table, like all other BD 
table handling processes, is transparent to the COMMAC. 


20.4.2 Continuous Mode for Transmit 


After transmitting the data pointed to by a buffer descriptor, MAL clears the Ready bit in the buffer 
descriptor control/status field. In this way, MAL will not process the same buffer descriptor again until 
software has filled the buffer with valid data and set the Ready bit in the descriptor again. While the 
Continuous Mode (CM) bit is set in the status/control field, MAL will not clear the Ready bit. The 
Continuous Mode allows re-transmission of the current data buffer without software intervention. This 
mode is generally used by protocols in which frequent re-transmission is an integral part of the 
protocol itself. In such cases, re-transmission can be performed without software intervention. 


20.4.3 Back Up a Packet for Transmit 


MAL is capable of re-transmitting the last packet (“back up a packet”) following a request from a 
COMMAC. If re-transmission is requested by the COMMAC, it must be assured that all the buffers of 
the re-transmitted packet are available and were not re-processed by the device driver. In regular 
operation, MAL resets the Ready bit of each buffer descriptor when finished processing the 
descriptor. When MAL is requested by the COMMAC to retransmit the last packet (the Back Up a 
Packet bit in the COMMAC TX channel Status Halfword is set), MAL doesn’t reset the READY bit in 

the last processed buffer descriptor, activate the end of packet interrupt, or write the status back to the 
descriptor in the memory. MAL also doesn’t consider this as an end of packet event. 


On the next service request from the same channel, MAL will start transmitting the packet again, 
starting from the first descriptor. 


Note: The last processed buffer descriptor can be either the last descriptor of the packet or, in case 
of early packet termination, the buffer descriptor that was being processed when the transmit 
channel initiated the early packet termination. MAL will retransmit the backed-up packet 
regardless of the Ready bit value. 


During retransmission of a backed-up packet, MAL may use descriptors on which the Ready bit was 
already cleared. Therefore, the device driver should not reuse descriptors before the Ready bit of the 
last descriptor is cleared. 


Note: In the case of descriptor not valid, which is the first one in TX channel, COMMAC is not allowed 
to return a status that contains a Back-Up a Packet request. 
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20.4.4 Descriptor Not Valid for Transmit 


When MAL accesses a buffer descriptor, it checks whether or not the Ready bit is set. If the Ready bit 
is not set, two cases apply (special treatment of the READY bit is performed in the case of Back-up a 
packet): 


For the case when the READY bit is not set: 


¢ If the descriptor is the first descriptor of the packet MAL informs the channel that data is currently 
unavailable. Further handling of this scenario is COMMAC-specific. The channel might either 
instruct MAL to access the same buffer descriptor periodically (by keeping its service request to 
MAL active) until it becomes ready, or ‘give up’ on the descriptor, completing the end-of-packet 
protocol with MAL. The channel might also indicate the buffer descriptor status to the device driver 
via an interrupt. However, in this case the COMMAC should eventually complete the packet transfer 
protocol with MAL. Following a descriptor not valid indication, MAL’s BD pointer continues pointing 
to the same location in the BD table. The next time a descriptor read is initiated by the COMMAC, 
MAL will search for the buffer in the same location. 


¢ lf the descriptor is not the first descriptor of the packet, it is considered a descriptor error. MAL 
deactivates the channel and from its point of view, the processing of the current packet has ended. 
Software may learn about this situation from one of two MAL interrupts (or from both). The first one 
is a nonmaskable interrupt that indicates the number of the TX channel, in which the descriptor 
error had occurred (interrupt bit for each TX channel, see “MAL Interrupt Enable Register 
(MALO_IER)” on page 20-31). The second one is a maskable interrupt which indicates a descriptor 
error event, regardless the channel number (one interrupt bit for all the channels, see “MAL Error 
Status Register (MALO_ESR)” on page 20-29). For more information about error handling, see 
“Error Handling” on page 20-19. 


For the case of a back-up packet: 


e When the current transmitted packet is a backed-up packet, all descriptors except the last, are valid 
even if the READY bit is not set. In this case, (not the last descriptor) MAL processes the packet 
descriptors regardless the READY bit value. If the READY bit of the last descriptor in the backed-up 
packet is not set, MAL treats it as a descriptor error. MAL handles the descriptor error as described 
above for the case when the packet isn’t a backed-up packet. 


20.4.5 Scroll Descriptors for Transmit 


MAL may be configured by software, in the case of early packet termination, to scroll in the buffer 
descriptor table to the first descriptor of the next packet. 


When a multiple-buffer packet is terminated early by the COMMAC, while MAL is processing a buffer 
which is not the last buffer in the packet, MAL can operate in one of the following ways: 


The MAL Scroll Descriptor in the configuration register is set: 


¢ In this case MAL will read the status word from the COMMAC channel. Then MAL will reset the 
READY bit in all the remaining buffer descriptors of the current packet. In addition, MAL will write 
the status to all the buffer descriptors. On the next service of this channel, MAL will fetch the first 
descriptor of the next packet. 
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The MAL Scroll Descriptor in the configuration register is clear: 


e In this case MAL will read the Status word from the COMMAC channel. Then MAL will terminate 
the current channel service by resetting the READY bit of the last processed buffer descriptor (the 
one in which there was an early termination) and will write the status only to this descriptor. On the 
next service of this channel, MAL will fetch the next descriptor in the current packet. In this case, 
the software is responsible to monitor the MAL location in the buffer descriptor table. 


In the case that the COMMAC requests a re-transmit of the early terminated packet (when the 
“backup” bit in the COMMAC status is set), MAL will re-transmit the packet regardless of the MAL 
Scroll Descriptor bit. 


20.5 Receive Software Interface 


MAL uses the RX channel buffer descriptors in a manner similar to that used for transmission. Once 
an RX COMMAC channel requests that a new packet be processed, MAL starts processing the 
channel's next buffer descriptor in the table. Once a channel is enabled in MAL, the channel may 
request MAL service. When it does, MAL accesses the first buffer descriptor (in that channel’s buffer 
descriptor table) that is pointed to by the COMMAC channel table pointer register. If that descriptor is 
ready (empty for RX), MAL will start processing the buffer. 


When it begins processing each packet, MAL writes the contents of the status/control field into the 
COMMAC. This information (defined by COMMAC’s implementation) can be used by the COMMAC 
for a per-packet configuration. 


Once data is received from the memory, MAL moves the data from the RX channel FIFO into the data 
buffer pointed to by the first buffer descriptor. The current buffer descriptor may be closed for two 
reasons: there is no more room left in the buffer, or the COMMAC channel indicated that the packet . 
reception ended. If additional buffering space is needed for the current packet, MAL moves on to the 
next buffer descriptor. As each buffer descriptor is closed, MAL updates the length field with the actual 
amount of bytes written into the buffer. The maximal length of the buffers for each channel is defined 
by a configuration register. The maximal receive buffer length is defined per channel. 


Once the COMMAC channel indicates that the packet reception has ended, it is expected to request 
that MAL update the received packet status in the BD status/control field. MAL updates the packet 
status and notifies the COMMAC. At this point the packet is considered received and the COMMAC 
may request that MAL begin the process of receiving a new packet. The first buffer of the next packet 
is the buffer in the BD table that followed the last descriptor of the previous packet. 


20.5.1 Wrapping the BD Table for Receive 


When MAL processes the buffer descriptor, it may encounter a Wrap indication within a buffer 
descriptor control field. This causes MAL to go back to the head of the channel’s buffer descriptor for 
the next buffer descriptor. This also happens when MAL reaches the maximal number of descriptors. 


20.5.2 Continuous Mode for Receive 


After using a buffer descriptor, MAL sets the buffer descriptor control to the Not-Empty state. In this 
way, MAL will not use the same buffer descriptor a second time until the software has processed the 
not-empty buffer descriptor and set it to Empty again. MAL will not clear the Empty bit while the 
Continuous Mode (CM) bit is set in the status/control field. The Continuous Mode is generally used by 
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protocols where frequent collisions are an integral part of the protocol itself (forcing the COMMAC to 
abort a reception process and restart). In such cases, re-reception can be performed without software 
intervention. 


20.5.3 Descriptor Not Valid for Receive 


When MAL accesses a buffer descriptor it may find that the Empty bit is not set. In the case of an RX 
channel descriptor, this situation is considered as a descriptor error. MAL deactivates the channel and 
from its point of view, the processing of the current packet has ended. Software may learn about this 
situation from one of two MAL interrupts (or from both): 


e An RXDE interrupt with the MALO_RXDEIR indicating which channel caused the interrupt 
¢ An SERR interrupt (system error) with one interrupt bit for all channels in the MALO_ESR 


For more about error handling, see “Error Handling” on page 20-19. 


20.5.4 Buffer Length for Receive 


The maximum length of an RX buffer descriptor is predetermined for all RX descriptors in each 
channel. The data-length value is programmable through a set of MAL registers (see “MAL Registers” 
on page 20-24). The actual data length field within the RX buffer descriptor is written by MAL. If the 
buffer is completely filled up, the value written will match the value programmed into the matching 
RX-Channel-Descriptor data-length register. If the buffer is only partially filled up (for example, when 
the RX packet ended before running out of buffer space), the actual amount of space filled is written 
into the length field. 


20.6 Descriptor Buffer Status/Control Fields 


The following sections details the status/control field bits. The information fields within the 
status/control field can be divided as follows: 

e Information from a software device driver directed to MAL and COMMAC 

¢ Information from MAL and COMMAC directed to software 

¢ Status/control field handling 

¢ Status/control field format 

¢ TX status/control field format 

¢ RX status/control field format 


20.6.1 Information from a Software Device Driver Directed To MAL and COMMAC 


¢ MAL-related buffer descriptor processing information: 


— Buffer Ready/Not Ready (determines the buffer’s validity). 

— Wrap to top of table or continue to next descriptor. 

— Ina transmit buffer descriptor — Is the current buffer the last one in the packet? 

- Continuous or normal mode; that is, should MAL change the Ready/Not Ready value? 
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¢ COMMAC channel configuration information: 


— Should the channel! generate an interrupt following the end of packet processing. 
— Protocol specific configuration. 


20.6.2 Information from MAL and COMMAC Directed to Software 
¢ MAL generated status information: 

— Buffer Ready/Not Ready (passes the buffer handling to software). 

— In receive buffer descriptor - Is the current buffer the first one in the packet? 

— In receive buffer descriptor - Is the current buffer the last one in the packet? 
¢ COMMAC channel generated status information: 


~ Protocol specific error and status information (transmit and receive). 


20.6.3 Status/Contro! Field Handling 


When MAL accesses a new buffer descriptor, the status/control word is written to the COMMAC 
channel. This allows the channel to configure itself for the current packet. 


For all “intermediate” buffer descriptors (all descriptors that do not contain the packet’s ending), the 
status/control field is written by MAL (rather than the COMMAC). In this case, the status/control field 
indicates that the current buffer is not the last one in the current packet. 


As MAL finishes processing the last buffer descriptor in a given packet, it reads the channel's status 
(via an OPB transaction) and writes it into the buffer descriptor’s status/control field. 


In effect, since all of the various control and status fields do not overlap, the status/control halfword is 
read/written as a whole. Each agent (MAL, COMMAC channel, and software) reads the entire 
status/control halfword, relates to specific fields of interest, and updates another subset of fields 
within the same halfword. While an agent modifies its related fields, all other fields remain unchanged. 


20.6.4 Status/Contro! Field Format 


The status/control halfword is divided into COMMAC channel data and MAL related data. As 
explained above, the MAL related fields are either aimed at controlling MAL or written by MAL for use 
by the software. The MAL fields are of no interest to the COMMAC (except the Ready and Empty 
bits). 


The same applies to the COMMAC channel fields. The COMMAC related fields are either aimed at 
controlling the COMMAC or written by COMMAC for use by the software. These fields are of no 
interest to MAL. 


MAL will not manipulate the COMMAC related fields, and COMMAC is not allowed to manipulate the 
MAL related fields. 
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20.6.5 TX Status/Control Field Format 


0 1 2 3 4 5 6 7 8 9 10. «11 12 13 14 «15 


a ee 


MAL related data COMMAC channel related data 


*-COMMAC specific control or status fields 


Figure 20-7. TX Status/Control Field 
Note: The bit numbering in Figure 20-7 relates to the Buffer Descriptor’s fullword which contains both 
the status/control and the length fields. 
20.6.5.1 Bit 0 -R — Ready 
This bit is set by the device driver and is cleared by MAL. 
The device driver sets this bit after preparing the buffer for transmission. 


MAL clears this bit when finish processing the buffer descriptor. MAL doesn’t clear the Ready bit in 
the case of backing-up a packet request and in case of continuous mode (see “Back Up a Packet for 
Transmit” on page 20-10 and “Continuous Mode for Transmit” on page 20-10). 

20.6.5.2 Bit 1-—W-Wrap 

0 — This is not the last data buffer descriptor in the buffer descriptor table. 


1 — This is the last data buffer descriptor in the buffer descriptor table. After this buffer has been used, 
MAL will transmit data from the first descriptor buffer in the table. 


This bit is controlled by software only. It controls MAL activities, and does not affect the COMMAC 
channel. 

20.6.5.3 Bit 2 -—-CM — Continuous Mode 

0 — Normal Operation 


1 — Continuous Operation. After this buffer descriptor is closed, the R-bit is not cleared by MAL. This 
ensures that the data buffer is ready for transmission when MAL next accesses this buffer descriptor. 
However, the R-bit is cleared if an error occurs during transmission. 


This bit is controlled by software only. It controls MAL activities and does not affect the COMMAC 
channel. 


20.6.5.4 Bit 3-L-—Last 
0 — This is not the last buffer in the current packet. 
1 — This is the last buffer in the current packet. 


This bit is controlled by software only. It controls MAL activities, and does not affect the COMMAC 
channel. 
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20.6.5.5 Bit 4— Reserved 


This bit is reserved. It is assumed that this bit is set to zero by the software. 


20.6.5.6 Bit 5 —!— Interrupt 


1 — After finishing processing the current buffer, if this bit is 1, the end of buffer field in the End of 
Buffer Interrupt Status Register is set and the end of buffer interrupt is asserted. 


0 — There is no action taken by MAL once it reaches the end of the current buffer. 
MAL asserts the end of buffer interrupt after it updates the buffer descriptor’s status field. 


This bit is controlled by software only. It controls the MAL activities and does not affect the COMMAC. 


20.6.5.7 Bits 6 to 15 


These bits are COMMAC specific and may contain control fields generated by the software in order to 
control the COMMAC channel. They may also contain status fields, generated by the COMMAC 
channel, that will be processed by software. 


20.6.6 RX Status/Control Field Format 


0 1 2 3 4 5 6 7 8 9 10 11 12 


13 #14 15 
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—————_,———— FF 


MAL related data COMMAC channel related data 
*-COMMAC specific control or status fields 


Figure 20-8. RX Status/Control Field 


Note: The bit numbering in Figure 20-8 relates to the buffer descriptor’s fullword which contains both 
the status/control and the length fields. 


20.6.6.1 Bit O-— E- Empty 


0 — The data buffer associated with this buffer descriptor has been filled with received data, or data 
reception has been aborted due to an error condition. Software is free to examine or write to any 
fields of this buffer descriptor. While this bit is set to Not Empty, MAL will not use this buffer descriptor 
again. “ 


1 — The data buffer associated with this buffer descriptor is empty, or reception is currently in 
progress. This buffer descriptor and its associated receive buffer are owned by MAL. Once the E-bit is 
set, software should not write to any fields of this RX buffer descriptor. 


MAL clears this bit after the buffer has been filled with received data or after an error is encountered. 
Software sets this bit to Empty after preparing the buffer for reception. This bit controls MAL and 
software activities. See “Bit 2 - CM — Continuous Mode” on page 20-17. 
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20.6.6.2 Bit 1-W- Wrap 
0 — This is not the last data buffer descriptor in the buffer descriptor table. 


1 — This is the last data buffer descriptor in the buffer descriptor table. After this buffer has been used, 
MAL will transfer data to the first buffer descriptor in the table. 


This bit is controlled by software only. It controls MAL activities and does not affect the COMMAC 
channel. 


20.6.6.3 Bit 2-— CM — Continuous Mode 
0 — Normal Operation 


1 — Continuous Operation. After this buffer descriptor is closed, the E-bit is not cleared by MAL. This 
ensures that the data buffer is ready to receive data when MAL next accesses its buffer descriptor. 
However, the E-bit is cleared if an error occurs during reception. 


This bit is controlled by software only. It controls MAL activities and does not affect the COMMAC 
channel. 


20.6.6.4 Bit 3 —L— Last 
0 — This is not the last buffer in the current packet. 
1 — This is the last buffer in the current packet. 


This bit is updated by MAL following the activity of the channel. 


20.6.6.5 Bit 4 —F — First 
0 — This is not the first buffer in the current packet. 
1 — This is the first buffer in the current packet. 


This bit is updated by MAL following the activity of the channel. 


20.6.6.6 Bit 5 —1— Interrupt 


1 — After finish processing the current buffer, if this bit is 1, the end of buffer field in the End of Buffer 
Interrupt Status Register is set and the end of buffer interrupt is asserted. 


0 — No action is taken by MAL at the end of the current buffer. 
MAL asserts the end of buffer interrupt after updating the buffer descriptor’s status field. 


This bit is controlled by software only. It controls MAL activities and does not affect the COMMAC. 


.20.6.6.7 Bits 6 to 15 


These bits are COMMAC-specific and they may contain control fields generated by the software in 
order to control the COMMAC channel. They may also contain status fields generated by the 
COMMAC channel to be processed by software. 
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20.7 MAL Programming Notes 


The following sections contain information about programming the MAL. 


20.7.1 MAL Initialization 
MAL initialization includes two parts: configuration and channel activation. 
Configuration involves two steps: 


¢ MAL configuration - This step is done only after a power on reset or after a MAL soft reset. The 
following registers are involved: 


— Configuration Register (MALO_CFG). This register defines MAL operation on the PLB and OPB. 


— Interrupt Enable Register (MALO_IER). This register is used to enable interrupts for various MAL 
error conditions. 


¢ Channel specific configuration - This information may be changed only when the associated 
channel is not active. (The bit for the channel in the TX or RX Channel Active Set Register, is 
cleared.) The following registers are involved: 


— MALO_RCBSx — RX Buffer Size (one register for each RX channel). This egieier defines the 
length of the RX buffers in memory. 


— MALO_TXCTPxR or MALO_RXCTPxR — Channel Table Pointer Register (one register for each 
channel). This register is programmed with the memory address of the first buffer descriptor 
table entry for the channel. 


Setting the channel specific configuration can be done as part of MAL initialization or as part of the 
COMMAC initialization process. In order to activate a channel, the following actions should be taken: 


e The channel has to be configured in MAL 
¢ The related bit in Channel Active Set Register (MALO_TXCASR or MALO_RXCASR) has to be set 
¢ The channel operation must be enabled (COMMAC configuration) 


20.7.2 Interrupts 


MAL has five interrupt lines (in the PPC405GP, all are connected to the UIC). Two interrupt lines, one 
for TX and one for RX, are used for interrupt events during packet transfer. An additional two interrupt 
lines, one for TX and one for RX, are used to report descriptor errors on a per-channel basis. The fifth 
interrupt is used to report MAL errors. 


¢ TXEOB interrupt line is used to report end of buffer or end of packet for a specific TX channel. A bit 
for the related channel is set in the MALO_TXEOBISR. See “End of Buffer Interrupt Status 
Registers” on page 20-28. 


¢ RXEOB interrupt line is used to report end of buffer or end of packet for a specific RX channel. A bit 
for the related channel is set in the MALO_RXEOBISR. See “End of Buffer Interrupt Status 
Registers” on page 20-28. 


¢ TXDE interrupt line is used to indicate a descriptor error event in a specific TX channel descriptor 
table. A bit for the related channel is asserted in the MALO_TXDEIR. See “Descriptor Error 
Interrupt Registers (MALO_TXDEIR, MALO_RXDEIR)” on page 20-32. 
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e RXDE interrupt line is used to indicate a descriptor error event in a specific RX channel descriptor 
table. A bit for the related channel is asserted in the MALO_RXDEIR. See “Descriptor Error 
Interrupt Registers (MALO_TXDEIR, MALO_RXDEIR)” on page 20-32. 


¢ SERR interrupt is used to report a system error indicated by MAL. For more information on 
handling the SERR interrupts, see “Error Handling” on page 20-19 and “Error eae on 
page 20-29. 


20.7.3 Error Handling 


MAL handles errors on a per-channel basis. Within a COMMAC channel, errors may arise from the 
COMMAC (detected as an OPB error), or from the memory access operations involved in MAL 
activity (detected as a PLB/descriptor error). 


When a bus error occurs, MAL is notified by an OPB or PLB error signal. OPB errors are related toa 
specific channel and therefore channel operation is stopped. In the case of a PLB error, MAL cannot 
identify which channel is involved, therefore channel operation is not stopped. When a descriptor error 
occurs, MAL can again identify the channel involved, so channel operation is stopped. MAL stops 
channel operation by clearing the associated bit in the MALO_TXCASR or MALO_RSCASR register. 


MAL keeps a record of the channels that experience errors and are made inactive. It also keeps a 
record of the characteristics of the first (or last) error detected (see “End of Buffer Interrupt Status 
Registers” on page 20-28). 


20.7.3.1 Error Detection 


The MAL communication, both with COMMACs and with memory, is carried out via the OPB or PLB. 
As long as this bus communication is error-free and no descriptor errors are detected, MAL maintains 
normal activity with the channels set by the processor as active in the Channel Active Registers. 


When an error is detected while performing a transfer for a channel, MAL asserts a maskable 
interrupt signal. If the identity of the channel is known (as is the case for OPB errors or descriptor 
errors) then MAL immediately halts the dialogue with the channel. No further transactions are made, 
and that channel is registered by MAL as a nonactive channel. MAL resets the channel by resetting its 
active bit in the Channel Active Register. Software must access the Channel Active Register in order 
to reactivate the channel. 


lf the identity of the channel that caused the error is not known (as is the case for PLB errors) then 
MAL continues to work normally. Error resolution and channel de-activation are the responsibility of 
the software. 

20.7.3.2 Indicated Errors 


Error description is stored in the Error Status Register (MALO_ESR), (see “MAL Error Status Register 
(MALO_ESR)” on page 20-29). . 


¢ Descriptor Error 


A descriptor error is a data error recognized during access to the descriptor table. The error can 
occur during TX or RX transmission. 


For RX channels, a descriptor error occurs when MAL accesses a descriptor in which the Empty bit 
is cleared. 
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For TX channels, a descriptor error occurs when MAL accesses a descriptor in which the Ready bit 
is cleared. The following cases are exceptions. 


— Onaccess to the first buffer descriptor in a TX packet. 
— On access to a buffer descriptor that is not the last descriptor in a backed-up packet. 


As aresult of this error, the following actions are taken by MAL: 


— The Active bit of the related channel is reset and the channel activity is halted until software 
reactivates channel activity. 


— The associated bit in the TX Descriptor Interrupt Error Register (MALO_TXDEIR) or RX 
Descriptor Error Register (MALO_RXDEIR) is set, causing a nonmaskable TXDE interrupt or 
RXDE interrupt respectively. 


— When the channel is reactivated, MAL points to the descriptor at the head of the BD table. 
OPB Non-Fullword Error 
This error indicates that a non-fullword acknowledge was asserted by a slave. 


Following this error, the active bit of the associated channel is reset and channel activity is halted 
until it is reactivated by software. When the channel is reactivated, MAL points to the descriptor at 
the head of the BD table. 


OPB Time-Out Error 
This error indicates that an OPB time-out error was reported by the OPB arbiter. 


Following this error, the active bit of the associated channel is reset and channel activity is halted 
until reactivated by software. When the channel is reactivated, MAL points to the descriptor at the 
head of the BD table. 


OPB Error 
This error indicates that an OPB error was detected. 


Following this error, the active bit of the associated channel is reset and channel activity is halted 
until reactivated by software. When the channel is reactivated, MAL points to the descriptor at the 
head of the BD table. 


PLB Error 

This error indicates that a PLB error was detected (from the PLB slave). 

In this case, MAL cannot determine which channel caused the error. Therefore, operation is not 
halted for any of the channels. 


20.7.3.3 Error Handling Registers 


MAL error handling logic includes two registers. 
e Error Status Register (ESR) 


This register holds information about the error that occurred and the interrupt status. The register 
includes the following fields: 


Error status — This field holds the error information. The information includes the number of the 
channel on which the error occurred (if known) and the type of the error. The error can be either the 
last detected error or a locked error if “Locked error mode” is active. See “Operational Error Modes” 
on page 20-21 for description of the Locked error mode. 
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The error status field includes an “Error Valid” bit which indicates whether there is valid error 
information in the error status field or not. The error status field is not valid when the “Error Valid” bit 
is cleared (by writing 1 to this bit). 

Interrupt status — Every error detected by MAL sets a related bit in the interrupt status field. 
Software can clear an interrupt status bit by writing 1 to the bit to be cleared. The bits in this field 
are accumulative which allows more than one interrupt to be indicated in the register. 


emus = 1] Error Status Bits Interrupt Status Bits 


Non-accumulative field Accumulative field 
Overwritten in non-locked mode 
Locked in locked mode 

Valid bit for 

Error Status bits 


Figure 20-9. Error Status Register Field 


20.7.3.4 Operational Error Modes 
MAL can operate in two different error handling modes: 


e Locked Error Mode: Information about the error is written to the Error Status Register, and the Valid 
bit in that register is set. Information in the Error Status field of the register stays locked until 
software unlocks it by resetting the error Valid bit. The Interrupt Status bits of the Error Status 
Register are not locked in this mode, so software can find out if more errors occur. However, the 
Error Status field applies only to the first error that is locked. 


e Non-Locked Error Mode: Information about the error is written in the Error Status Register, and the 
error Valid bit is set. Each new error will be overwritten, so the information in the Error Status Field 
is valid only for the last error that occurred. 


In both modes, each error written in the error description field will set the error Valid bit, and it is the 
responsibility of software to reset this bit. 


The error handling mode is programmed in the MAL Configuration Register (see “MAL Configuration 
Register (MALO_CFG)” on page 20-25). 


20.7.3.5 Resolution of an Error Situation 
When MAL encounters an error, it reacts as follows: 


¢ Writes information about the error in the Error Status Register (ESR). This information includes the 
channel ID of the channel which caused the error (if known), the bus on which the error occurred, 
and the kind of error that occurred. 


e Resets the channel that caused the error (if known) in the Channel Active Register. 


¢ Updates the Interrupt Status bits in the MALO_ESR. Then, depending on the mask defined in 
MALO_IER (Interrupt Enable Register), it may send an interrupt to software (in PPC405GP, it 
sends it to the Universal Interrupt Controller). 
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After receiving an interrupt from MAL, software can analyze the error information read from the Error 
Status Register. Software can restart channel activity by setting the associated bit in the Channel 
Active Register. 


When a channel is stopped and restarted, MAL starts processing descriptors from the first descriptor 
in the channel descriptor table. Therefore, software may also update the value of the other channel 
related registers (see “Channel Table Pointer Registers (MALO_TXCTPxR, MALO_RXCTPOR)” on 
page 20-33) in order to continue from the same buffer in memory. 


In the case of PLB errors, MAL does not know which channel caused the error. It is the responsibility 
of the software to analyze the MAL error registers and the PLB slave error registers to determine 
which channel caused the error. Software should reset the channel within MAL, resolve the problem, 
and then reactivate the channel. 


See Figure 20-10 on page 20-23 for a flow chart illustrating the steps MAL performs when resolving 
an error situation. 
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20.7.3.6 Interrupts To Software 


An Error is detected 


Is ita PLB error? 


YES 


No channel is associated 
with the error, therefore no 
channel is disabled 


Disable the channel in the 
Channels Active Register 


Update relevant interrupt 
bit in ESR. 


Are interrupts enabled for this 
type of error in IER ? 


YES 


Assert MAL_SERR_INT No interrupt 
: Signal 


Error mode = locked ? 


Is the Error valid bit in ESR set ? 


Update Error status bits 


Error status bits free — 
update Error status bits 


Error status bits locked 
do not update them 


Resume operation 


Figure 20-10. MAL Error Processing 


Update Error status bits 
and set Error valid bit to 1 
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Figure 20-10 on page 20-23 describes MAL actions once an error is detected. Note that the actual 
decisions MAL makes may be in a different order than represented by this figure. In any case, the 
device driver should consider that all of the MAL actions are performed at the same time. 


20.8 MAL Registers 


Access to MAL registers is through the DCR interface. 
e Unless otherwise specified, all register fields are initialized at chip reset to 0. 


e Reserved fields are read as undefined and must be written as Os. 


Table 20-1. MAL Registers 


[Rewer [oonninie [aoe [teeter 


MALO_RXCTPOR 
Ox1E0 Channel RX O Channel Buffer Size Register 


MALO_RCBSO 
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20.8.1 MAL Configuration Register (MALO_CFG) 


This register defines the operational mode of MAL. Unless a configuration change is required during 
system operation, the configuration register needs to be set only during system initialization. 


SR GA PLBLE 


MAL Software Reset 
0 MAL reset is complete 
1 Reset the MAL 


Reserved 


PLB Priority 
00 Lowest 


Guarded Active 

0 GUARDED signal not 
applied to the PLB slave 

1 GUARDED signal applied 
to the PLB slave 


Ordered Active 

0 ORDERED signal not 
applied to the PLB slave 

1 ORDERED signal applied 
to the PLB slave 


PLB Lock Error 

0 LOCKERROR signal not 
applied to the PLB slave 

1 LOCKERROR signal 
applied to the PLB slave 


13:16 | PLBLT PLB Latency Timer 
17 PLBB PLB Burst 
O Burst transactions not 
allowed 
1 Burst transactions allowed 


Preliminary 


EOPIE SD 


This bit is used to generate a general reset to MAL 
through a software command. 

After setting this bit, MAL hardware (registers, 
interface and internal state machines) returns to the 
power-on reset value. 

The software writes 1 to this bit in order to drive 
MAL to the reset state. The bit is cleared by the 
hardware when the reset is completed (one system 
clock). 


Determines the priority of MAL requests on the PLB. 


When this bit is set, MAL applies the GUARDED 
signal to the PLB slave when it is the initiator on the 
bus. 

When set, the slave can access all the memory in 
the current page as well as the subsequent page. 


When this bit is set, MAL applies the ORDERED 
signal to the PLB slave when it is initiator on the bus 
during data write transactions. 

Note that the ORDERED signal is always driven 
active during status write transactions. 


Wher this bit is set, MAL applies the LOCKERROR 
signal to the PLB slave when it is the initiator during 
PLB transactions. 


Determines the number of cycles allowed for burst 
transactions on the PLB. 


When this bit is reset, MAL is not allowed to perform 
burst transactions. 
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24 =| OPBBL OPB Bus Lock When this bit is set, MAL locks the OPB during data 
O OPB not locked transfers to and from the COMMACs. 
1 OPB locked 


Reserved 


29 End of Packet Interrupt When this bit is set, an interrupt is generated on 
Enable every end of packet (both transmit and receive). 
0 Generate interrupton every Whenclear, end of packet/buffer interrupt is 
end-of-packet only if the generated only if the buffers I bit is set (1). 
buffers | bit is set Note: An interrupt is generated for every descriptor 
1 Generate interrupt is on on which the | bit is set, regardless of the 
every end-of-packet state of the EOPIE bit. 


Locked Error Active Determines MAL error handling mode. When this 
0 Handle errors in a non- bit is set, MAL will handle errors in the locked mode, 
locked mode otherwise it will handle errors in a non-locked mode. 
1 Handle errors in locked 
mode 


MAL Scroll Descriptor Determines whether or not MAL should scroll to the 
0 Do not scroll to the first first descriptor of the next packet, following an early 
descriptor of the next packet termination initiated by the related 
packet COMMAC. When set, Scrolling mode is active. 
1 Scroll to the first descriptor 
of the next packet 


20.8.2 Channel Active Set and Reset Registers 


For the Channel Active Set/Reset Registers (MALO_TXCASR, MALO_TXCARR, MALO_RXCASR, 
MALO_RXCARR), each bit represents its associated channel (bit 0 for channel 0, etc.). When a bit is 
equal to 1, the channel has been enabled for operation. When a bit is equal to 0, the channel is 
disabled (MAL ignores any requests for service). If a channel is active when its enable bit is cleared, 
MAL stops processing the current packet. After the channel's enable bit is cleared, MAL goes back to 
the top of the channel descriptor table (pointed to by the Channel Table Pointer Register). 


¢ To enable a channel: 
— Write a 1 to its corresponding bit in the Channel Active Set Register (CASR). 
~ Multiple channels can be enabled with a single CASR register write. 
¢ To stop and reset a channel: 
— Write a 1 to its corresponding bit in the Channel Active Reset Register (CARR). 
— Writing a 0 to bits in the CARR registers has no effect on the channels. 
— Multiple channels can be reset with a single CARR register write. 


MAL also clears the enable bit of a channel following an indication of an error on the channel. The 
CASR or CARR register(s) can be read to determine which channels are currently active. The 
following figures describe these registers. 
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Each bit represents its related 
channel (bit 0 for channel 0, etc.). 


.When 1 is written to the bit, channel 
operation is enabled. 

There are only two TX channels in the 
PPC405GP. 


oP REr | i 


Figure 20-13. TX Channel_Active Reset Register (MALO_TXCARR) 


Transmit Channel Active Reset Each bit represents its related 
channel (bit 0 for channel 0, etc.). 


When 1 is written to the bit, channel 
operation is disabled. 

There are only two TX channels in the 
PPC405GP. 


Ei. Reserved 


Each bit represents its related 
channel (bit 0 for channel 0 etc.). 
When 1 is written to the bit, channel 
operation is enabled. 

There is only one RX channel in the 
PPC405GP. 


Preliminary Memory Access Layer 20-27 


Figure 20-15. RX Channel_Active Reset Register (MALO_RXCARR) 


Receive Channel Active Reset Each bit represents its related 
channel (bit 0 for channel 0, etc.). 
When 0 is written to the bit, channel 
operation is disabled. 
There is only one RX channel in the 
PPC405GP. 


ere 


20.8.2.1 End of Buffer Interrupt Status Registers 


Each bit in the TX End-of-Buffer Interrupt Status and RX End-of-Buffer Interrupt Status registers is 
related to a channel's descriptor buffer table. 


The TX End-of-Buffer Interrupt Status register contains the End-of-Buffer Status bits for each TX 
channel. The RX End-of-Buffer Interrupt Status register contains the End-of-Buffer Status bits for the 
RX channels. The mechanism (as described below) for both RX and TX registers is the same. 


MAL sets a channel's bit in one of the following conditions: 


e When MAL finishes the processing of a buffer (writes back the status to the current descriptor), the 
related bit in this register is set if the | bit in the descriptor status is set. 


¢ When MAL finishes the processing of a packet (writes back the status of the paenets last buffer) 
and MALO | MCR[EOPIE] is set. 


Note: In case MAL finishes the processing of a packet which is backed up, MAL doesn’t consider it 
as an end of packet. Therefore, MAL will not set the appropriate channel bit in the End-of- 
Buffer Register. 


e When the Bad Packet bit is set in the COMMAC channel Status halfword. 


The device driver resets the interrupt by writing a 1 to the related bit. Writing a 0 has no effect. 


Each bit represents its related 


channel (bit 0 for channel 0, etc.). 
Writing 1 to a bit resets it. 

There are only two TX channels in the 
PPC405GP. 
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Figure 20-17. RX End of Buffer Interrupt Status Register (MALO_RXEOBISR) 


Receive Channel End-of-Buffer Interrupt Each bit represents its related 
channel (bit 0 for channel 0, etc.). 
Writing 1 to a bit resets it. 


There is only one RX channel in the 
PPC405GP. 


20.9 Error Registers 


The following paragraphs describe MAL error registers. For more information about MAL errors see 
“Error Handling” on page 20-19. 


20.9.1 MAL Error Status Register (MALO_ESR) 


This register holds the information about the error that occurred and the interrupts status. The register 
includes the following fields: 


¢ Error status bits — This field holds the error information. The information includes the number of 
the channel on which the error occurred (if known) and the type of the error. The error can be either 
the last detected error or a locked error if “Locked error mode” is active. (See “Operational Error 
Modes” on page 20-21 for description of the Locked error mode.) 


The error status field includes an “Error Valid” bit which indicates whether there is an error information 
in the error status field or not. The error status bits are not valid when the “Error Valid” bit is cleared 
(by writing 1 to this bit). 


¢ Interrupt status bits — Every error detected by MAL sets a related bit in the interrupt status field. 
The interrupt status bits may be cleared by software by writing 1 to the bit to be cleared. The bits in 
this field are accumulative (more than one interrupt may be indicated here). These bits are masked 
by the IER (Interrupt Enable Register) to create a maskable interrupt, which is implemented by the 
MAL_SERR_INT signal (connected to the UIC on the PPC405GP). 


Note: In order to reset the interrupt bits and the Error valid bit in the Error Status register, 1 must be 
written to the related bit. Writing O has no effect. 


More than one bit can be cleared at a time and only R/W bits can be reset. 
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Figure 20-18. MAL Error Status Register (MALO_ESR) 


Error Valid Bit 


O Bit 1:15 are available for latching new 


error information. 


1 Bits 1:15 contain last error. A new 


error cannot be latched. 


Channel ID 


| Reserved 


Descriptor Error 
0 No error 
1 Non-valid descriptor 


OPB Non-fullword Error 
0 No error 
1 Non-fullword asserted 


OPB Timeout Error 
0 No error 
1 OPB timeout 


OPB Slave Error 
0 No error 
1 OPB slave error 


PLB Bus Error Indication 
O No error 
1 PLB bus error 


When this bit is set, bits 1-6 include the ID 
of the erroneous channel (in case of OPB 
errors). Bits 11-15 indicate the type of 
error. 

In non-locked mode, the error indication 
describes the last error that had occurred. 
In locked mode, the error is the first one 
that had occurred after this bit was 
cleared. 

This bit is set when an error occurs and 
remains set until reset by the software. In 


- locked mode, new errors cannot be 


latched in the error lock indication fields if 
this bit is set 


This field contains the number of the 
channel which caused the locked error. 
Bit 1 indicates whether the channel ID 
represents an RX channel (1) or a TX 
channel (0). 

Bits 2:6 indicates the number of the 

channel that caused the error. 

Note: An error on the PLB cannot be 
related to a channel. The error 
condition may be resolved by using 
the error information optionally 
locked in the PLB slave. 


Indicates that the error is a non-valid 
descriptor, which is not the first descriptor 
in a TX packet. 


Indicates that the error is a non-fullword 
acknowledge asserted by an OPB slave. 


Indicates the error is an OPB timeout. 


Indicates the error is an error indication 
asserted by an OPB slave. 


When this bit is set, the detected erroris a 
PLB error. There is no meaning to the 
Channel ID field in this case. 


Preliminary 


Reserved 


Descriptor Error Interrupt 


O No error 


1 Descriptor data error recognized 


OPB Non-fullword Error Interrupt 
O No error 
1 Non-fullword acknowledgment from a 


slave 


OPB Timeout Error Interrupt 


0 No error 
1 OPB time-out 


OPB Slave Error Interrupt 


O No error 


1 OPB error from a slave 


PLB Bus Error Interrupt 


O No error 


1 PLB error indication 


A descriptor data error is recognized 
during access to the descriptor table. 
This error indication is asserted when a 
non-valid descriptor is accessed, which is 
not the first descriptor in a TX packet. Set 
condition for this bit generates a maskable 
interrupt. 


This bit is set following a non-fullword 
acknowledgment coming from a slave. Set 
condition for this bit generates a maskable 
interrupt. 


This bit is set following an OPB time out 
error indication. Set condition for this bit 
generates a maskable interrupt. 


This bit is set following an OPB error 
indicated by the slave. Set condition for 
this bit generates a maskable interrupt. 


This bit is set following a PLB error 
indication (from the PLB slave). Set 
condition for this bit generates a maskable 
interrupt. 


20.9.2 MAL Interrupt Enable Register (MALO_IER) 


Each bit in the following register, when it is set, enables assertion of the interrupt signal 
(MAL_SERR_INT) when the related bit in the MALO_ESR (interrupt bit) is set. 


NWE OPB 


= eg EEIEE 


Figure 20-19. MAL Interrupt Enable Register (MALO_IER) 


| 0:26 [| Reserved 


Pee ie | Descriptor Error 


Non_W_Err_Int_Enable 
Pees Time_Out_Int_Enable 
OPB_Err_int_Enable 
PLB_Err_Int_Enable 


Preliminary 


When set, this bit enables the descriptor 
error (descriptor not valid) interrupt. 


When set, this bit enables OPB non-word 
transfer error interrupt. 


When set, this bit enables OPB time-out 
error interrupt. 


When set, this bit enables the OPB Slave 
error interrupt. 


When set, this bit enables the PLB error 
interrupt. 
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20.9.3 Descriptor Error Interrupt Registers (MALO_TXDEIR, MALO_RXDEIR) 


Each bit in the following registers is related to a channel descriptor buffer table. Each bit indicates a 
descriptor data error related to a certain channel. 


‘The TX Descriptor Error register contains the Descriptor errors bits of the TX channels. The RX 
Descriptor Error register contains the Descriptor errors bits of the RX channels. The mechanism (as 
described below) for both RX and TX registers is the same. 


MAL sets a channel’s bit when a descriptor data error was recognized during access to the descriptor 
table of a specific channel (see “Descriptor Error’ on page 20-19). 


The device driver resets the interrupt by writing a 1 to the related bit. Writing a 0 has no effect. When 
one or more of the TX Descriptor Error Interrupt bits is set, then the MAL_TX_DESC_ERRF_INT bit is 
set. When one or more of the RX Descriptor Error Interrupt bits is set, then the 
MAL_RX_DESC_ERRF_INT signal is set (attached to UIC on the PPC405GP). 


Each bit represents its related 

channel (bit O for channel 0, etc.). 

When one or more bits are set, 
MAL_DESC_ERP_INT is set. Writing 1 to 
a bit resets it. 

There are only two TX channels in the 
PPC405GP. 


Each bit represents its related 

channel (bit 0 for channel 0 etc.). 

When one or more bits are set, 
MAL_DESC_ERP_INT is set. Writing 1 to 
a bit resets it. 

There is only one RX channel in the 
PPC405GP. 
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20.9.4 Channel Table Pointer Registers (MALO_TXCTPxR, MALO_RXCTPOR) 


MAL uses RX Channel table pointer registers, one for each RX channel, and TX Channel table 
pointer registers, one for each TX channel. The Channel Table Pointer Registers point to the base 
address, in memory, of the descriptor buffer table used by each channel. 


Note 1: Bits 0 to 12 of all the TXCTPxR registers are mapped to the same physical register. Writing 
into any of these registers overwrites the value of bits 0 to 12 in all the TXCTPxR registers. 
Read operation has no effect. Bits 0 to 12 of all the RXCTPxR registers are mapped to the 
same physical register. Writing into any of these registers overwrites the value of bits 0 to 12 
in all the RXCTPxR registers. Read operation has no effect. 


Note 2: When changing the value of either of the MALO_TXCTPxR registers, both TX channels must be 
idle. To verify a channel is idle, check the device’s Transmit Idle bit. Another way to assure that the 
channels are idle is to disable the channels before changing the MALO_TXCTPxR regsiter, and 
then re-enable them once the MALO_TXCTPxR register is set to its new value. 


The TX and RX Channel Table Pointer Registers have an identical format as shown in Figure 20-22 
and Figure 20-23. There are two TX registers (0 and 1), and one RX register (0) in PPC405GP. 


0 34 


Figure 20-22. TX Channel Table Pointer x Register (MALO_TXCTPxR) 


Channel Table Pointer Pointer to the base address in memory of 
the buffer descriptor table used by the 
channel. The value entered should be a 
pointer to a location in memory 
accommodating an aligned double fullword 


(this requires the three least significant bits 
of this pointer must be 000). 

There are two transmit channels (x = 0 
and 1). 


Figure 20-23. RX Channel Table Pointer x Register (MALO_RXCTPxR) 


Channel Table Pointer Pointer to the base address in memory of 
the buffer descriptor table used by the 
channel. The value entered should be a 
pointer to a location in memory 


accommodating an aligned double fullword 
(this requires the three least significant bits 
of this pointer must be 000) 

There is one receive channel (x = 0). 


The Table Pointer Registers retain their value following Soft Reset or Channel Reset. 
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Chapter 21. Serial Port Operations 


The PPC405GP contains two universal asynchronous receiver/transmitters (UARTs) which provide 
two full-duplex serial interfaces to support communications with serial peripheral devices. Each UART 
is compatible with the National Semiconductor (NS) 16550 chip, and includes a 16-byte send anda 
16-byte receive FIFO. 


Features of the UART include: 


¢ Compatible with the NS 16550 

e 16-byte send FIFO, 16-byte receive FIFO 

¢ Full duplex operation 

¢ Programmable baud rate generator 

¢ Supports 5- to 8-bit word size, 1 or 2 stop bits, even, odd, or no parity 

¢ One 8-wire interface (UARTO) and one 4-wire interface (UART1) 

The UART performs serial-to-parallel conversion on data characters received from a peripheral 
device, and parallel-to-serial conversion on data characters received from the processor. The 
processor can read the complete status of the UART at any time during the functional operation. 
Status information reported includes the type and condition of the transfer operations being 


performed by the UART, as well as any error conditions, such as parity, overrun, framing, and break 
interrupt. 


This UART is functionally identical to NS16450 in character mode (on power up it will be in this 
mode), and can be put into FIFO mode to relieve the processor of excessive software overhead. 
Here, internal FIFOs are activated allowing 16 bytes (plus 3 bits per byte of error data in the RCVR 
FIFO) to be stored in both receive and transmit modes. 


The source of the UART serial clock input is selected in Chip Control Register 0 
(CPCO_CRO[U0OEC:U1EC)) bits 24 and 25. Either the internal serial clock or an external serial clock 
can be selected. A programmable baud rate generator is included that is capable of dividing the 
UART serial clock input by a divisor of 1 to (21° — 1) and producing the 16x clock required for driving 
the UART internal transmitter/receiver logic. The internal serial clock input is derived from the CPU 
clock by a divisor specified in CPCO_CRO[UDIV]. 


The UART has an interrupt system that can be programmed to the user's requirements, helping to 
minimize the computing required to handle the communications link. UART interrupts are capable of 
triggering an interrupt request to the PPC405GP interrupt controller. 


21.1. Functional Description 


e Runs NS 16550 software 

e Registers are identical to the NS16550 register set 

e After reset, all registers are identical to the NS16450 register set 
- ¢ Complete status reporting capability 


¢ Transmitter and receiver are each buffered with 16-byte FIFOs when FIFO mode selected 
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e Can add/delete standard asynchronous communication bits such as start, stop, and parity to/from 
the serial data 


e When in character mode, holding and shift registers eliminate the need for precise synchronization 
between the processor and serial data 


e Full prioritized interrupt system controls 
¢ Independently controlled transmit, receive, line status, and data set interrupts 


¢ Programmable baud rate generator divides the UART serial clock input by 1 to (2'8_1) and 
generates the 16x clock: 


Baud rate (bps) = (Serial Clock Input) / (16 x Decimal Divisor) 


e Receiver uses 5-way oversampling as follows: it samples each serial bit five times, and if at least 
three of the samples are 1’s, the bit is-determined to be a 1, otherwise it is a 0 


¢ Fully programmable serial-interface characteristics: 
— 5-,6-, 7-, or 8-bit characters 
Even, odd, or no parity bit generation and detection 
1-,1.5-, or 2-stop bit generation 
Variable baud rate 
e Line break generation and detection, and false start bit detection 
e Internal diagnostic capability: 
— Loopback controls for communications link fault isolation 
— Break, parity, overrun, framing error simulation 


21.2 Serial Input Clocking 


The two PPC405GP UARTs can be clocked individually from an external serial clock or from an 
internally generated serial clock. The internally generated serial clock is derived from the CPU clock, 
and is CPU/n, where n ranges from 1 to 32. The divisor n is programmed by setting a value of 0 to 31 
in CPCO_CRO[UDIV] (see Chapter 7, “Clocking”). 


The choice of serial clock frequency affects the serial communications error rate. If an external clock 
of 1.8432 MHz (or some multiple of this frequency) is used, the error rate approaches zero. However, 
when using the internally generated clock only certain clock frequencies are possible, which results in 
a small, non-zero error rate in all cases, unless SysClk is chosen as an integer multiple of 

1.8432 MHz. 


The optimum serial clock frequency is determined from the following relationship: 
Serial Clock = Baud Rate x 16 x UART Divisor 


Acceptable baud rates are always integral multiples of 300 (for example, 1200 = 4 x 300). Table 21-1 
shows optimum UART divisor and CPU divide ratios for a range of possible baud rates. This 
information is provided for four different CPU clock frequencies. The UART divisor is programmed in 
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UARTx_DLM and UARTx_DLL (see “Divisor Latch LSB and MSB Registers (UARTx_DLL, 
UARTx_DLM)” on page 21-14). The value range is 1 to (2416-1)=65535. 


Table 21-1. Baud Rate Settings 


Prats op) [Die Rao Frequency i) | UARTDvisor| “Rete tope) | ror) 
Rate (bps) | Divide Ratio | Frequency (MHz) | UART Divisor Rate (bps) Error (%) 
[0TH GBT GOTT _799.928205[ 0.0088096 
2400.159610 | 0.0064004 
(836008 [te 670] 8 | 95602. 780898 | 0.0064004 
sao; S| _——=SC~=«sS GO| ——_—_—=«T | S8GBO.BAGTAT 0.4699000| 
Pes 
ees 


57600 8.3333 57870.370370| 0.4693930 
115200 ee a to 18] 16.6670 115740.740741 | 0.4693930 
307200 5.0000 ieee 312500.000000| 1.7252604 


CPU Clock = 166.66 MHz 


31 
27 
1 

5.3763 1200.076800 | 0.0064000 


[—_s7600| so | —___sas58] 6 |_sraro.a7oree | 0.4609026) 
CPU Clock = 200MHz 
2) 
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21.3 UART Registers 


UART registers are accessed via memory locations OxEF60_OXYY where X=3 for UART 0 and X=4 
for UART 1. 


Table 21-2. UART Configuration Registers 


san coaneamir| Aamees [Rov sein [Re 
faRicren [arama [A [urrxremroaree | 
facie Jereomnt | w [octane mae | 
faaicik——_[eraowe | R [Unoneoetein Rega | oom 


UARTx_FCR EF60_0X02 UART x FIFO Control Register 0000 0000 
UARTx_LCR EF60_0X03 UART x Line Control Register 0000 0000 


fnicsen——_|eronmor [aw [unmrveeacneeamee [ 
fnerceir [arene [aw [oxo ese— [ 
faercoon [arene [aw [urxortamo —[ 


1. UARTx_LCR[DLAB] controls the function accessed through registers EF60_0X00 and EF60_0X01. When 
UARTx_LCR[DLAB] is 0, access is enabled to the Receiver/Transmitter registers and the Interrupt Enable register. 
When UARTx_LCR[DLAB] is a 1, access is enabled to the Divisor Latch registers. 


The system programmer may access any of the UART registers via the processor. These registers 
control all UART operations including transmission and reception of data. In PPC405GP there are two 
UARTSs, designated 0 (8-wire interface) and 1 (4-wire interface). In the following sections, the registers 
are specified with a generic name where x represents 0 or 1. For example, the Line Control Register 
appears as a UARTx_LCR. 


For UART1, two of the four wires are TX and RX. The remaining two wires can be programmed as a 
combination of DTR and DSR, or CTS and RTS in CPCO_CRO(DCS:RDS). DCD and RI are not 
available on the 4-wire interface. 
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21.3.1 Receiver Buffer Registers (UARTx_RBR) 


Figure 21-1. UART Receiver Buffer Registers (UARTx_RBR) 


a 


Note: UARTx_RBR is shown in standard PowerPC bit notation, where 0 is the MSb and 7 is the LSb. 


21.3.2 Transmitter Holding Registers (UARTx_THR) 


Figure 21-2. UART Transmitter Holding Registers (UVARTx_THR) 


a 


Note: UARTx_THR is shown in standard PowerPC bit notation, where 0 is the MSb and 7 is the LSb. 


21.3.3 Interrupt Enable Registers (UARTx_IER) 


Five UART interrupts on four priority levels are enabled via the Interrupt Enable Register, 
UARTx_IER. Any of the five interrupts can be used to surface a UART interrupt to the PPC405GP 
interrupt controller. Each interrupt can be enabled by setting its appropriate bit. Resetting 
UARTx_IER[4:7] totally disables the UART interrupt system. Disabling an interrupt prevents it from 
being shown as active in the UARTx_IIR and prevents it from signaling a UART interrupt to the 
PPC405GP interrupt controller. See Table 21-3, “Interrupt Priority Level,” on page 21-6. 


ELS! ERBFI 


OEM CET 


EDSS! ETBEI 


Figure 21-3. UART Interrupt Enable Registers (UARTx_IER) 


FOS fe Reserved Always 0. 
EDSSI Enable Modem Status Interrupt 


5 ELSI Receiver Line Status Interrupt enable 
O Enable receiver line status interrupt . 
1 Disable receiver line status interrupt 
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Transmitter Holding Register Empty 

Interrupt enable 

0 Enable transmitter holding register empty 
interrupt 

1 Disable transmitter holding register 


empty interrupt 


Received Data Available Interrupt enable In FIFO mode, timeout interrupts follow the 
0 Disable received data available interrupt enable/disable state of ERBFI. 
1 Enable received data available interrupt 


Note: UARTx_IER is shown in standard PowerPC bit notation, where 0 is the MSb and 7 is the LSb. 


21.3.4 Interrupt Identification Registers (UARTx_IIR) 


The UART prioritizes interrupts into four levels which are recorded in the Interrupt Identification 
Register. The interrupt types in the order of their priority are as follows: 


1. Receiver line status . 

2. Received data available and character timeout indication 
3. Transmitter holding register empty 

4. Modem status 


Table 21-3 lists the interrupt priority levels. 


Table 21-3. Interrupt Priority Level 


IIR liR_ } Priority 
Bit 4 Bit6; Level Interrupt Type Interrupt Source Interrupt Reset Control 
Receiver Line Status | Overrun, Parity or Framing | Read LSR. 
Error, or Break Interrupt. 
2 Received Data Receiver data available or | Read RBR, or FIFO 
Available trigger level reached. drops below trigger level. 


Character Timeout No characters have been | Read RBR. 
Indication removed from or input to 

the receiver FIFO during 

the last four character 

times and it contains at 

least one character during 

this time. 


Transmitter Holding | Transmitter Holding Read IIR (if source of 
Register Empty Register Empty. interrupt) or write THR. 
Modem Status Clear to Send, Data Set Read MSR. 
; Ready, Ring Indicator or 
Data Carrier Detect. 
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When the processor accesses UARTx_IIR, the UART records new interrupts, but does not change its 
current contents until the access by the processor is complete. The UART indicates the highest 
priority interrupt pending to the PPC405GP interrupt controller via the IIR. 


FCl IPL 


IP 


Figure 21-4. UART Interrupt Identification Registers (UARTx_IIR) 


0:1 FCI FIFO Control Indicator 
00 FIFOs disabled (UARTx_FCR[FC] = 0) 
01 Reserved 
10 Reserved 
11 FIFOs enabled (UARTx_FCR[FC] = 1) 
ee ee ee 


Interrupt Priority Level See Table 21-3. 

000 Priority level 4 

001 Priority level 3 Note: Priority 1 is highest priority. 
010 Priority level 2 , 
011 Priority level 1 

100 Reserved 

101 Reserved 

110 Priority level 2 

111 Reserved 


Interrupt Pending When set to 0, IIR contents can be used as 
0 Interrupt is pending a pointer to the appropriate interrupt 
1 No interrupt pending service routine. 


Note: UARTx_IIR is shown in standard PowerPC bit notation, where O is the MSb and 7 is the LSb. 


21.3.5 FIFO Control Registers (UARTx_FCR) 


The FIFO control register has the same address as the IIR and is a write-only register. This register is 
used to perform FIFO control operations such as selecting the type of DMA signaling, setting the 
receiver FIFO trigger levels, clearing the FIFOs, and enabling the FIFO. 
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RFTL DMS RFR 


TFR FC 


Figure 21-5. UART FIFO Control Registers (UVARTx_FCR) 


RFTL Receiver FIFO Trigger Level 
00 1 byte 
01 4 bytes 
10 8 bytes 
11 14 bytes 


Py Revered 
DMA Mode Select Select single or multiple transfer mode if 


0 Mode 0 = single transfer UARTx_FCR[7] = 1. 
1 Mode 1 = multiple transfers 


Transmitter FIFO Reset A 1 written to this bit clears all bytes in the 

0 Operation complete transmitter FIFO and resets all of its 

1 Reset the transmitter FIFO counter logic to 0. The transmitter shift 
clearing. 


. 
5 FR 
register is not cleared. This bit is self- 
RFR Receiver FIFO Reset A 1 written to this bit clears all bytes in the 
0 Operation complete receiver FIFO and resets all of its counter 
1 Reset the receiver FIFO logic to 0. The receiver shift register is not 
| 


T 
cleared. This bit is self-clearing. 


from FIFO and 16450 modes. 
Programming other bits will be ignored if 


FIFO Enable When set to 1, both the receiver and 

0 Disable FIFOs transmitter FIFOs are enabled. When set 

1 Enable FIFOs to 0, both receiver and transmitter FIFOs 
are reset. Data is automatically cleared 
from both FIFOs when changing to and 
this bit is not a 1. 


Note: UARTx_FCR is shown in standard PowerPC bit notation, where 0 is the MSb and 7 is the LSb. 


21.3.6 Line Control Registers (UARTx_LCR) 


The system programmer uses the line control register (LCR) to specify the format of the 
asynchronous data communications exchange and to set the Divisor Latch Access bit. The contents 
of the LCR can also be read by the processor. The read capability simplifies system programming, 
and eliminates the need for separate storage of the line characteristics in system memory. 
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DLAB SP PEN WLS 


SB EPS SBS 


Figure 21-6. UART Line Control Registers (UARTx_LCR) 


Divisor Latch Access Bit 
O Address RBR, THR and IER with 


LTADR2-0 for read or write operation 
1 Address Divisor Latches with LTADR2-0 


for read or write operation 
Set Break 


0 Disable Break 
1 Enable Break 


Sticky Parity 
0 Disable sticky parity 
1 Enable sticky parity 


Even Parity Select 


0 Generate odd parity 
1 Generate even parity 


Parity Enable 
0 Disable parity checking 
1 Enable parity checking 


Stop Bit Select 
0 Characters have 1 stop bit 
1 Characters have 1.5 or 2 stop bits 


Word Length Select Bits 0,1 
00 Use 5-bit characters 
01 Use 6-bit characters 
10 Use 7-bit characters 
11 Use 8-bit characters 


Preliminary 


Causes a break condition to be transmitted 
to the UART when the core is receiving. 
SOUT is forced to the spacing state (0). 
This bit acts only on SOUT and has no 
effect on the transmitter logic. 


lf UARTx_LCR[EPS] = 1 and 
UARTx_LCRI[PE] = 1, the parity bit is 
transmitted and checked as 0. If 
UARTx_LCR [EPS] = 0 and 
UARTx_LCR[PE] = 1,the parity bit is 
transmitted and checked as 1. 


This bit is significant only if 
UARTx_LCR[PE] = 1. 


If UARTx_LCR{CL] = 00, characters have 
1.5 stop bits. For any other value of 
UARTx_LCR[CL], characters have 2 stop 
bits. 

The receiver checks the first stop bit only, 
regardless of how many stop bits are 
selected. 


Note: UARTx_LCR is shown in standard PowerPC bit notation, where 0 is the MSb and 7 is the LSb. 
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21.3.7 Modem Control Registers (UARTx_MCR) 


The interface between the modem, data set, or peripheral device emulating a modem, and the UART, 
is controlled by the Modem Control Register (UARTx_MCR). 


/ 


LM OUT1 DTR 


(or 21 3]4] 5/617 


OUT2 RTS. 


Figure 21-7. UART Modem Control Registers (UARTx_MCR) 


(o2 [reseed ays 


Loopback Mode Provides’ a local loopback feature for diagnostic 

0 Disabled testing of the UART. The following occurs: 

1 Enabled 1. SOUT is set to the marking state (logic 1) SIN is 
disconnected. 


2. The output of the transmitter shift register feeds 
the input of the receiver shift register. 

3. The four modem control inputs DSR, CTS, RI, 
and DCD are disconnected. 

4. The four modem control outputs DTR, RTS, 
OUT1, and OUT2 are set to a logic 1 (their 
inactive state). 

5. The four modem control outputs are connected 
internally to the four modem control inputs. 

Transmitted data is immediately received to verify 

the UART transmit and receive data paths. 

Receiver and transmitter interrupts are operational. 

Their sources are external to the UART. Also 

operational are the modem control interrupts, but 

their source is the low-order 4 bits of UARTx_MCR 
instead of the modem control inputs to the UART. 

UARTx_IER still controls the interrupts. 

4 OUT2 | User Output 2 Auxiliary user designated output. 

0 OUT2 inactive (1) 

1 OUT2 active (0) 

User Output 1 

0 OUT1 inactive (1) 

1 OUT active (0) 

Request To Send 

0 RTS inactive (1) 

1 RTS active (0) 

Data Terminal Ready 

0 DTR inactive (1) 

1 DTR active (0) 


Auxiliary user designated output. 


Note: UARTx_MCR is shown in standard PowerPC bit notation, where 0 is the MSb and 7 is the LSb. 
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21.3.8 Line Status Registers (UARTx_LSR) 


Information concerning the data transfer is held for the processor in this register. Bits 3 through 6 are 
conditions that produce a receiver line status interrupt whenever the condition corresponding to the 
active bit is detected and the interrupt is enabled. This register is intended for read operations only 
and writing is not recommended. 


RFE THRE FE OE 


Figure 21-8. UART Line Status Registers (UARTx_LSR) 


Receiver FIFO Error Indicator Always 0 in 16450 mode. 
0 In FIFO mode, reset to 0 when the 

processor reads the UARTx_LSR, 

provided there are no subsequent errors 

in the FIFO. 
1 There are one or more instances of 

parity error, framing error or break 

indication in the FIFO. 


Transmitter Empty Indicator 

0 Reset to 0 whenever the THR or the 
transmitter shift register contain a 
character. In FIFO mode, it is reset to 0 
whenever the transmitter FIFO or the 
transmitter shift register contain a 
character. 


Set to 1 when the THR and the 
Transmitter shift register are both empty. 
In FIFO mode, it is set to 1 when the 
transmitter FIFO and the transmitter shift 
register are both empty. 


Transmitter Holding Register Empty When UARTx_IER[THRE] = 1, the UART 
Indicator issues an interrupt to the PPC405GP 
0 Concurrent reset to 0 with the loading of _ interrupt controller. This bit is set to 1 when 
the THR by the processor. InFIFO mode  acharacter is transferred from the THR to 
it is reset to O when at least one byte is the transmitter shift register. 
written to the transmitter FIFO. 
Set to 1 when the UART is ready to 
accept a new character for transmission. 
In FIFO mode, this bit is set when the 
transmitter FIFO is empty. 
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Break Interrupt Indicator. 


0 Reset to 0 whenever processor reads 
Line Status Register (LSR). 

1 Set to 1 whenever the received data 
input is held at the spacing level (0) for 
longer than a full word transmission time. 


Framing Error Indicator. 

0 Reset to 0 whenever processor reads 
LSR. 

1 Set to 1 whenever stop bit following the 
last data bit or parity bit is detected as 0 
(spacing level).Indicates that a valid stop 
bit was not found in the received 
character. 


Parity Error Indicator. 

0 Reset to 0 whenever processor reads 
UARTx_LSR. | 

1 Indicates that the received data 
character does not have the correct 
parity as determined by the even parity 
select bit (UARTx_LCR.[EPS]). Set to 1 
upon detection of a parity error. 


Overrun Error Indicator. 

0 Reset to 0 whenever processor reads 
UARTx_LSR. 

1 Data in the RBR was read by the 
processor before the next character was 
transferred into the UARTx_RBR, hence 
the original data was lost. 


Receiver Data Ready Indicator. 

0 Reset to 0 when all data has been read 
from the receiver FIFO or the 
UARTx_RBR. 

1 An entire incoming character has been 
received into the UARTx_RBR or 
receiver FIFO. 


The full word transmission time is the time 
required for the start bit, data bits (can be 
5-8 bits), parity and stop bits. In FIFO 
mode, this error is revealed to the 
processor when the character this error is 
associated with is at the top of the FIFO. 
Only one 0 character is loaded into the 
receiver FIFO when a break occurs. After 
the next valid start bit is received and has 
gone into the marking state, the next 
character transfer is enabled. Error causes 
a Receiver Line Status Interrupt. 


Error causes a Receiver Line Status 
Interrupt. 


In FIFO mode, this error is revealed to the 
processor when the character this error is 
associated with is at the top of the FIFO. 
Error causes a Receiver Line Status 
Interrupt. 


In FIFO mode, if the incoming data 
continues to fill the FIFO beyond the trigger 
level, an OE occurs only after the FIFO is 
completely full and the entire next 
character has been received in the receiver 
shift register. The processor is informed of 
the OE immediately upon occurrence. The 
character in the shift register will be 
overwritten and will not be transferred to 
the FIFO. Error causes a Receiver Line 
Status Interrupt. 


Note: UARTx_LSR is shown in standard PowerPC bit notation, where 0 is the MSb and 7 is the LSb. 
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21.3.9 Modem Status Registers (UVARTx_MSR) 


The processor can monitor the present state of the modem (or peripheral device) control lines by 
reading the Modem Status Register (UARTx_MSR). In addition, the UARTx_MSR has four bits to 
indicate if any of the modem (or peripheral device) control lines have changed state. 


In loopback mode (UARTx_MCRILB] is 1), 
it is equivalent to VARTx_MCR[OUT2]. 


Complement of Ring Indicator In loopback mode (UARTx_MCRILB] is 1), 
it is equivalent to VARTx_MCR[OUT 1]. 


Complement of Data Set Ready In loopback mode (UARTx_MCR[LB] is 1), 
it is equivalent to UARTx_MCR[DTR]. 


Complement of Clear To Send In loopback mode (UARTx_MCRILB] is 1), 


it is equivalent to VARTx_MCR[RTS]. 


DDCD | Delta Data Carrier Detect Indicates that the DCD input to the UART 
0 Set when processor reads the Modem has changed state since the processor last 
Status Register read the Modem Status Register. Amodem 
1 DCD input changed state status interrupt is generated. 


Trailing Edge of Ring Indicator Indicates that the Rl input to the UART 
0 Set when processor reads the Modem changed from 0 to 1 since the processor 

Status Register last read the Modem Status Register. A 
1 Rl input changed from 0 to 1 modem status interrupt is generated. 


Delta Data Set Ready Indicates that the DSR input to the UART 

0 Set when processor reads the Modem has changed state since the processor last 
Status Register read the Modem Status Register. A modem 

1 DSR input changed state status interrupt is generated. 

Delta Clear To Send Indicates that the CTS input to the UART 

0 Set when processor reads the Modem has changed state since the processor last 
Status Register read the Modem Status Register. A modem 

1 CTS input changed state status interrupt is generated. 


Note: UARTx_MSR is shown in standard PowerPC bit notation, where 0 is the MSb and 7 is the LSb. 


21.3.10 Scratchpad Registers (UARTx_SCR) 


A scratchpad register intended for use by the programmer as a temporary data location is provided in 
this UART. It does not control the UART operation in any way. 
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Figure 21-10. Scratchpad Registers (UARTx_SCR) 


ey [ [eae 


Note: UARTx_SCR is shown in standard PowerPC bit notation, where 0 is the MSb and 7 is the LSb. 


21.3.11 Divisor Latch LSB and MSB Registers (UARTx_DLL, UARTx_DLM) 


The divisor latches are used to program the UART divisor used in generating the baud clock. A 16-bit 
divisor may be programmed through these registers. Access to these registers is provided by setting 
UARTx_LCR[DLAB] = 1. These registers have a power-on reset value of 0. 


Figure 21-11. UART Baud-Rate Divisor Latch (MSB) Registers (UVARTx_DLM) 


er [eae 


Note: UARTx_DLM is shown in standard PowerPC bit notation, where 0 is the MSb and 7 is the LSb. 


Figure 21-12. UART Baud-Rate Divisor Latch (LSB) Registers (UARTx_DLL) 


8:15 | Data bits , 


Note: UARTx_DLL is shown in standard PowerPC bit notation, where 0 is the MSb and 7 is the LSb. 


The UART divisor is calculated using the following formula: 
UART Divisor = Serial Input Clock/(16 x Baud Rate) 
For example, if the serial input clock= 11.0592MHz and a baud rate of 9600bps is required: 
UART Divisor = Serial Input Clock/(16 x Baud Rate) 
= 11,059,200/(16x9600) 
= 72 = 0x48 
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For this example, UARTx_DLM should be programmed to 0 and UARTx_DLL register should be 
programmed to 0x48. Due to the error introduced by rounding, some baud rates cannot be generated 
at certain serial input clock frequencies. Table 21-4 lists some common baud rates and their 
corresponding Divisor Latch register values with a serial input clock of 11.0592MHz. 


Table 21-4. Divisor Latch Settings for Certain Baud Rates 


a 


21.4 FIFO Operation 


21.4.1 Interrupt Mode 


21.4.1.1 Receiver 


Receiver interrupts occur as described below when the receiver FIFO and receiver interrupts are 
enabled by setting UARTx_FCR[FE] = 1 and UARTx_IER[ERBFI]] = 1. 


The received data available interrupt is issued when the number of characters in the FIFO has 
reached the trigger level programmed into UARTx_FCR. This interrupt is reset to 0 when the FIFO 
character count drops below this trigger level. 


The received data available indicator is issued when the number of characters in the FIFO has 
reached the trigger level programmed into UARTX_FCR. This indicator is reset to 0 when the FIFO 
character count drops below this trigger level. 


The receiver line status interrupt (UARTx_IIR = OxC6) is a top priority interrupt, whereas the received 
data available interrupt (UARTx_IIR = 0xC4) is a second priority interrupt. 


Data Ready (UARTx_LSR[DR]) is set as soon as a character is transferred from the shift register to 
the receiver FIFO. This bit is reset when the FIFO is empty. 


Receiver timeout interrupts will occur as described below when the receiver FIFO and receiver 
interrupts are enabled by setting UARTx_FCR[FE] = 1 and UARTx_IER[ERBFI] = 1. 


A FIFO timeout will occur when: 


At least one character is in the receiver FIFO, no serial characters have been received for four 
serial character time periods, and the processor has not read the FIFO for four serial character time 
periods. A serial character time period is as follows: 


1/(baud rate) x (# start bits + word length + # parity bits + # stop bits) 


For example, the serial character time period for an 8-bit word with one parity bit, two stop bits at 
56K baud is as follows: 
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1/(56000) x (1+8+1+2)=214.3us 
So the timeout would occur after 857.1 ps, if the above conditions hold. 


When a timeout interrupt has occurred, it is cleared and the timer is reset when the processor reads 
one character from the receiver FIFO. 


When a timeout interrupt has not occurred, the timer is reset after a new serial character is received 
or the processor reads the receiver FIFO. 


21.4.1.2 Transmitter 


Transmitter interrupts occur, as described below, when the transmitter FIFO and transmitter interrupts 
are enabled by setting UARTx_FCR[FE] = 1 and UARTx_IER[ETBEIl] = 1. 


The transmitter holding register interrupt (UARTx_IIR = OxC2) occurs when transmit FIFO is empty, 
and is cleared as soon as the transmitter holding register is written to or the IIR is read. One to 16 
characters may be written to the transmitter FIFO while servicing this interrupt. 


The transmitter FIFO empty indications are delayed by one character time minus the last stop bit time 
whenever the following event occurs: UARTx_LSR[THRE] = 1 and there were less than two bytes 
simultaneously present in the transmit FIFO since the last UARTx_LSR[THRE] = 1. If 
UARTx_FCR[FE] = 1 (FIFOs enabled), the first transmitter interrupt after changing UARTx_FCR[FE] 
is immediate. 


Receiver FIFO trigger level interrupts, received data available interrupts, and character timeouts all 
have equivalent second interrupt priority. Current transmitter holding register empty interrupt and 
Transmit FIFO empty have equivalent third interrupt priority. 


21.4.2 Polled Mode 


When UARTx_FCR[FE] = 1 (FIFOs enabled), and UARTx_IER[5:7] are all set to 0 (interrupts 
disabled), the UART is in FIFO polled mode of operation. The receiver and transmitter are controlled 
separately, so either can be in polled mode of operation. In polled mode, the user program must 
check the UARTx_LSR to see the status of the receiver and/or transmitter. 


UARTx_LSR3:6 specifies which errors (if any) have occurred. Character status errors are handled in 
the same way as in interrupt mode. Since UARTx_IER[ELSI] = 0, the IIR is not affected. 
UARTx_LSR[DR] is set as long as there is at least one character in the receiver FIFO. 
UARTx_LSR[THRE] indicates if the transmitter FIFO is empty. UARTx_LSR[TEMT] indicates if the 
transmitter FIFO and the transmitter shift register are empty. UARTx_LSR[RFE] indicates if there are 
any errors in the receiver FIFO. 


In FIFO polled mode, there are no character timeout or trigger levels; however, the FIFOs are still 
capable of holding characters. 


21.5 UART and Sleep Mode 
Both UARTs can be placed in sleep mode via the UART sleep bits in the CPCO_ER register 


(CPCO_ER[UARTO:UART1]). The most common usage would be to save a little power if one or both 
of the UARTs were not going to be used. 
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Using sleep mode dynamically requires careful software control to make sure the UARTs are idle 
before putting them to sleep. 


21.6 DMA Operation 


The DMA controller can be configured to perform DMA operations using UARTO, which appears as an 
8-bit peripheral to the DMA controller. When selected, the UART receiver is internally wired to the 
DMAReg and DMAAck signals of DMA channel 2, and the transmitter is internally wired to the 
DMAReqg and DMAAck signals of DMA channel 3. 


The UART can be operated in FIFO mode or non-FIFO mode. In FIFO mode, the transfers can be 
done as single transfers (DMA mode 0) or multiple transfers (DMA mode 1), depending on the setting 
of the DMS field in the FIFO Control Register (FCR). In non-FIFO mode, DMA transfers are 
performed using single transfers, using the UART’s DMA mode 0. This section describes proper 
UARTO DMA programming. For more information on general DMA programming, see Chapter 18, 
“Direct Memory Access Controller,” on page 18-1. 


21.6.1 Chip Control Register 0 (CPCO_CRO) 


Only CPCO_CRO fields related to UART are shown in Figure 21-13. Other non-related functions are 
not shown here. 


DCS DTE DAEC U1EC 
8] 19}20]21]/22|23)24/25/26 30/31) 


RDS DRE UOEC UDIV 


1 


Figure 21-13. Chip Control Register 0 (CPCO_CRO) 


fore [oo [Rene CSC~C~—SCSCSdY 
19 DCS DSR/CTS select 
O DSR is selected. 
1 CTS is selected. 
20 RTS/DTR select 
0 ATS is selected. 
1 DTR is selected. 


DMA Transmit Enable for UARTO 
0 DMA transmit channel is disabled. 
1 DMA transmit channel is enabled. 
DMA Receive Enable for UARTO 
0 DMA receive channel is disabled. 
1 DMA receive channel is enabled. 
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UOEC Select External Clock for UARTO 
0 UARTO uses the internally derived serial 
clock. 
1 UARTO uses the UARTSerClk external 
serial clock input. 


U1EC Select External Clock for UART1 
0 UART1 uses the internally derived serial 
clock. 
1 UART1 uses the UARTSerClk external 
serial clock input. 


26:30 | UDIV UART Divisor UDIV specifies the divider ratio between the 
00000 Divide by 1 CPU and UART serial clock frequencies. 
00001 Divide by 2 ; UARTO and UART1 can use a serial clock 
00010 Divide by 3 frequency derived from the CPU clock 
: frequency divided by UDIV, or use the 
: UARTSerClk external serial clock input. For 
. example, if the CPU runs at 200MHz, a 
11110 Divide by 31 UDIV of 20 sets the serial clock frequency at 
11111 Divide by 32 10MHz. 

Note: Maximum serial clock frequency is 
slightly less than 1/2x OPB frequency. 


a [a Resend 


21.6.2 Transmitter DMA Mode 


The UARTO Transmit Channel Enable field of the Chip Control Register 0, CPCO_CRO[DTE], controls 
the use of the serial port transmitter as a DMA destination. For the transmitter in DMA mode 0, when 
the FIFOs are disabled or the FIFOs are enabled and there are no characters in the TX FIFO or 
Transmit Holding Register (THR), the DMA request goes active. Once activated, the DMA request 
goes inactive after the first character is loaded into the TX FIFO or THR. For the transmitter in DMA 
mode 1, when FIFOs are enabled and there is at least one unfilled position in the TX FIFO, the DMA 
request goes active. This signal will become inactive when the TX FIFO is completely full. To operate 
in this mode, DMA Channel Control Register 3 (DMAO_CR3) must be configured to accept DMA 
requests from an internal source. Setting the Peripheral Location (PL) bit of DMAO_CR3 to a logic 1 
configures DMA channel to accept DMA requests from UARTO. Table 21-5 lists required register 


23 DAEC DMA Allow Enable Clear for UARTO 

0 DTE and DRE for UARTO are not cleared 
when the UART receives a corresponding 
terminal count. 

1 DTE and DRE for UARTO are cleared 
when the UART receives a corresponding 
terminal count. 

25 
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settings for UARTO transmit transfers. Other DMA registers and register fields must be programmed 
appropriately, see Chapter 18, “Direct Memory Access Controller,’ on page 18-1 for more information. 


Table 21-5. UARTO Transmitter DMA Mode Register Field Settings 


CPCO_CRO[DTE]=1 UARTO DMA Transmit channel is enabled using DMA channel 3. 


reached, set to 1 to clear enable when terminal count is reached. 


DMAO_CR3[PWC]=000010 | Peripheral Wait cycles, how long the internal DMAck is active. Three 
cycles are required. 


DMA0_CR3[PHC]=000 Peripheral Hold Cycles are 0. 
DMAO_CR3[ETD]=1 EOT/TC is programmed as terminal count output. 
UARTO_FCR[DMS] Set to 0 for a single DMA transfer or 1 for multiple DMA transfers. 


Note: When using DMA Channel 3 for UARTO transmitter transfers, external DMA transfers cannot 
be performed on this channel. 
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21.6.3 Receiver DMA Mode 


The UARTO Receive Enable field of the Chip Control Register 0, CPCO_CRO[DRE], controls the use 
of the serial port receiver as a DMA source. For the receiver in DMA mode 0, when there is at least 
one character in the RX FIFO or Receive Buffer Register, RBR, the DMA request goes active. Once 
activated, the DMA request goes inactive when there are no more characters in the FIFO or RBR. For 
the receiver in DMA mode 1, when the FIFOs are enabled and the trigger level or the timeout has 
been reached, the DMA request goes active. Once activated, it will go inactive when there are no 
more characters in the RX FIFO or RBR. To operate in this mode, DMA Channel Control Register 2 
(DMAO_CR2) must be configured to accept DMA requests from an internal source. Setting the 
Peripheral Location (PL) bit of DMAO_CR2 to a logic 1 configures DMA channel to accept DMA 
requests from UARTO. Table 21-6 lists required register settings for UARTO receiver transfers. Other 
DMA registers and register fields must be programmed appropriately, see Chapter 18, “Direct 
Memory Access Controller,” on page 18-1 for more information. 


Table 21-6. UARTO Receiver DMA Mode Register Field Settings 


i 
reached, set to 1 to clear enable when terminal count is reached. 


EOT/TC is programmed as terminal count output. 
UARTO_FCR[DMS] Set to 0 for a single DMA transfer or 1 for multiple DMA transfers. 


Note: When using DMA Channel 2 for UARTO receiver transfers, external DMA transfers cannot be 
performed on this channel. 
é 
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Chapter 22. IIC Bus Interface 


The PPC405GP provides an inter-integrated circuit (IIC) bus interface complying with specifications 
contained in the Philips® Semiconductors document The /*C-bus and how to use it (including 
specifications) (1995 update). 


The IIC bus is a two-wire, bi-directional, open-drain, low-speed serial interface. The serial clock 
(IICSCL) and serial data (IICSDA) lines are bidirectional, to support multiple bus masters and to mix 
high- and low-speed devices on the same bus. 


The IIC interface (referred to as IIC to Geunguien it from the Philips I@C bus) supports the following 
standard and enhanced features: 


¢ 100-kHz and 400-kHz operation 
¢ 8-bit data transfers 

¢ 7-bit and 10-bit addressing 

¢ Slave transmitter and receiver 

¢ Master transmitter and receiver 
¢ Multiple bus masters 


The IIC interface can switch between 7-bit and 10-bit addressing under program control. 


22.1 Addressing 


The IIC interface supports 7-bit and 10-bit addressing for master and slave transfers. 


Addressing is described in detail in “IICO Low Master Address Register’ on page 22-5, “IICO High 
Master Address Register’ on page 22-6, “IICO Low Slave Address Register’ on page 22-14, and “IICO 
High Slave Address Register” on page 22-14. 


Descriptions of addressing modes and address formats follow. 


22. 1. 1 Addressing Modes 


For master transfers, the address mode (AMD) field of the IIC Control! register (IICO_CNTL) controls 
whether 7-bit or 10-bit addresses are used. If IICO_CNTL[AMD] = 0, addresses contain 7 bits; if 
IICO_CNTL[AMD] = 1, addresses contain 10 bits. 


For slave transfers, the contents of the IICO High Slave Address register (!ICO_HSADR) determines 
whether 7-bit or 10-bit addressing is used. If IICO_HSADR = 0b00000000, 7-bit addressing is used. If 
10-bit addressing is to be used for slave transfers, IICO_HSADR = 0b1111 Oyyx, where yy contains 
the high-order bits of the 10-bit address, and x is a don’t care. 


Programming Note: For slave transfers, |ICO_CNTL[AMD] does not control addressing mode. 
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22.1.2 Seven-Bit Addresses 


Figure 22-1 illustrates a 7-bit address. For master transfers, the address bits 0 through 6 (A0:A6) are 
read from IICO_LMADR. For slave transfers, AO:A6 are read from I1CO_LSADR. Bit 7 of address byte 
0 contains a transfer type bit provided by the IIC interface. 


MSb LSb 
Address ByteO| AO A1 A2 A3 A4~= AS 
Bit 0 Bit 7 


Figure 22-1. 7-Bit Addressing 


22.1.3 Ten-Bit Addresses 


Figure 22-2 illustrates a 10-bit address. AO:A1 of address byte 0 are read from IICO_HMADR[A6:A7] 
(for master transfers) or IICO_HSADR[A6:A7] (for slave transfers). These are the two highest-order 
address bits transmitted on the IIC bus. Bit 7 of address byte 0 contains a transfer type bit provided by 
the IIC interface. 


For 10-bit addressing for master or slave transfers, respectively, 1ICO_HMADR[A0:A4] and 
IICO_HSADR [A0:A4] must contain 0611110. 


The low-order byte of the 10-bit address, contained in A0:A7 of address byte 1, are read from 
IICO_LMADR or IICO_LSADR for master or slave transfers, respectively. 


MSb LSb 
Address ByteO [1 1 1 1 0 8 86A0 
Bit 0 Bit 7 
MSb LSb 
Address Byte1[ A2 A3 A4 A5 AB A7 
Bit 0 Bit 7 


Figure 22-2. 10-Bit Addressing 


22.2 \IIC Registers 


lIC registers are accessed at memory locations OxEF600500—0xEF600510 in the PPC405GP. 


Table 22-1 lists the IIC registers. Descriptions of the registers, in the listed order, follow in “IIC 
Register Descriptions” on page 22-3. 


Table 22-1. IIC Registers 
PPC405GP Effect of 
Register Memory Map | Address Reset 


IICO Master Data Buffer I1CO_MDBUF OxEF60 0500 
Reseed | Csfonreooson | or fT 


ec 1 Co ey eee ee 
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Table 22-1. IIC Registers 


PPC405GP Effect of 
Register Memory Map | Address Reset 


ICO Slave Data Buffer | CO_SDBUF OxEFOO 0502 


Co Reserved fp foxereoosos [os fT 
ICO Low Master Address | IICO_LMADR OxEF60 0504 0x4 | RW | No | 8 | 
ICO High Master Address | IICO_HMADR OxEF60 0505 oxs | RW | No | 8 | 
lICO Control IICO_CNTL OxEF600506 | 0x6 | RW | Cleared | 8 | 
ICO Mode Control IICO_MDCNTL OxEF60 0507 | 0x7 | RW | Cleared | 8 | 
IICO Status IICO_STS OxEF60 0508 | 0x8 | RW | Cleared | 8 | 
{CO Extended Status IICO_EXTSTS OxEF60 0509 | 0x9 =| RW | Cleared | 8 | 
IICO Low Slave Address IICO_LSADR OxEF60 050A | oxA | RW | No | 8 | 
ICO High Slave Address _| IICO_LHSADR OxEF60050B | OxB | RW | No | 8 | 
IICO Clock Divide IICO_CLKDIV OxEF60 050C | oxC | RW | Cleared | 8 | 
1ICO Interrupt Mask IICO_INTRMSK OxEF60 050D | oxD | RW | Cleared | 8 | 
IICO Transfer Count IICO_XFRCNT OxEF60 050E | OxE | RW | Cleared | 8 | 
IICO Extended Control and | IICO_XTCNTLSS OxEF60 050F OxF R/W Cleared 
Slave Status 
IICO Direct Contro! lI1CO_DIRECTCNTL | OxEF60 0510 


22.3 IIC Register Descriptions 


The following sections contains the bit definitions for the various registers in the IIC interface. 


22.3.1 liCO Master Data Buffer 


‘The IICO Master Data Buffer (IICO_MDBUF) is a 1-byte x 4-byte first-in/first-out (FIFO) buffer. A byte 
written to IICO_MDBUF is placed into the fourth FIFO stage. If the third FIFO stage is empty, the data 
is moved into the third stage at the next OPB clock. This process is repeated for the second and first 
FIFO stages at each successive OPB clock. The byte moves through the buffer until it reaches the 
deepest unoccupied stage of the FIFO. The buffer data is either written on the IIC bus when the IIC 
interface performs a write, or is received from the IIC bus when the IIC interface performs a read. 


Figure 22-3 illustrates the IICO_MDBUF. 


Figure 22-3. I1CO Master Data Buffer (IICO_MDBUF) 
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I1CO_MDBUF is cleared (flushed and set to empty) whenever the IIC interface is reset, or 
IICO_MDCNTL[FMB] = 1. Figure 22-4 shows the four FIFO stages. 


ptt 2t sta) [tf at sta | 1] 2) 3] 4 | 


Clock Cycle 1 Clock Cycle 2 Clock Cycle 3 Clock Cycle 4 


Figure 22-4. FIFO Stages 


When IICO_MDBUF is written with a byte, the byte is placed in the FIFO. The hardware pushes the 
byte into the deepest unoccupied stage in the FIFO and advances one FIFO stage per clock. Thus, if 
the FIFO is empty, four clocks are needed (one per stage) for the byte to walk to the first stage of the 
FIFO. This timing is important to consider when reading the IICO_MDBUF immediately after data is 
written. When a master transfer is requested, the IIC interface handles this latency. 


If a byte is written to IICO_MDBUF while the FIFO is full, the byte is discarded and not placed into the 
FIFO. 


If 1ICO_MDBUF is written with two bytes in a halfword access, and there is space in the FIFO, byte 0 
of the halfword is placed ahead of byte 1 in the FIFO. The MSB, byte 0, is written to the IIC bus first, 
followed by the LSB, byte 1. 


I}CO__ MDBUF receives data from the IIC bus when the requested master transfer is a read. The first 
byte received is the first byte read by software from IICO_MDBUF. 


For halfword reads the first byte received is MSB ,byte 0, and the following byte is LSB, byte 1. When 
an empty FIFO is read, the byte (or halfword) most recently read is returned. 


Care must be taken not to start a requested master operation while there is data in IICO_MDBUF. If, 
for example, a master read transfer is requested and obsolete data is in IICO_MDBUF, the obsolete 
data would be presented, to the requesting software, as data read by the requested transfer. 


22.3.2 IICO Slave Data Buffer 


The IICO Slave Data Buffer (I1CO_SDBUF) is a copy of IICO_MDBUF. The data contained in the slave 
buffer is either received from the lIC bus when the IIC interface is addressed as a slave during a write, 
or is written on the IiC bus when the IIC interface is addressed as a slave during a read operation. 


I1CO_SDBUF works in the same way as IICO_MDBUF, except that lICO_SDBUF is used only to store 
data sent or received in slave transfers on the liC bus. This enables overlapping slave and master 
transfers on the IiC bus. 
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Bit assignments for the IICO_MDBUF and IICO_SDBUF are identical, as illustrated in Figure 22-5. 


Figure 22-5. IICO Slave Data Buffer (lICO_SDBUF) 
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11CO_SDBUF is cleared (flushed and set to empty) whenever the IIC interface is reset, or 
l1CO_MDCNTL[FSB] = 1. 


22.3.3 [ICQ Low Master Address Register 


The IICO Low Master Address (IICO_LMADR) and IICO High Master Address Register (IICO_HMADR) 
form addresses that the IIC interface transmits on the IIC bus. 


Programming Note: IICO_HMADR is used only for 10-bit addressing. 


When IICO_CNTL[AMD] = 0 (7-bit addressing), only IICO_LMADR is written. IICO_LMADR[A0:A6] 
form the address transmitted on the IIC bus; IICO_LMADR{[A7] is a don’t care. When 
IICO_CNTL[AMD] = 1 (10-bit addressing), IICO_LMADR[A0:A7] form the second byte address 
transmitted on the IIC bus. 


Figure 22-6 illustrates the I[CO_LMADR. 


ie 
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(6 | AB Address bit 6 LSb for 7-bit addresses 


7 A7 Address bit 7 LSb for 10-bit addresses; don’t care for 
7-bit addresses 


22.3.4 IICO High Master Address Register _ 
ICO High Master Address Register (IICO_HMADR) is not used for 7-bit addressing. 


When IICO_CNTL[AMD] = 1 (10-bit addressing), 1}CO_HMADR must be programmed to 0b1111 Oyyx, 
where yy are the high-order bits of a 10-bit address and xis a don’t care. 


Thus, in 10-bit address mode, IICO_HMADR[A5:A6] are the two highest-order bits of the 10-bit 
address and IICO_HMADR[A7] is a don’t care. IICO_LMADR contains the low-order byte of the 10-bit 
address. 


Figure 22-7 illustrates the IICO_HMADR. 


AO A2 A4 = A6 


A1 A383 AS AZ 
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Address bit 5 MSb for 10-bit addresses 
Address bit 6 Next to MSb for 10-bit addresses 


Address bit 7 Don’t care for 10-bit addresses 


22.3.5 IICO Control Register 


The IICO Control Register (IICO_CNTL) starts and stops IIC interface master transfers on the IIC bus. 
When a transfer begins, the IIC interface uses the values in IICO_CNTL to determine the type and 
size of the transfer. 


Programming Note: |ICO_CNTL must be the last register programmed. Whenever 
IICO_CNTL[PT] = 1, the IIC interface attempts to perform the requested transfer, using values set 
in other registers. Note that not all IIC registers must be programmed before performing each 
transfer. 


During transfers, and after transfers finish, software can read the IICO_STS and IICO_EXTSTS 
registers to determine the state of the IIC interface and the IIC bus. 
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Only IICO_CNTL[PT] is cleared when a requested master transfer is complete; the remaining bits are 


not affected. 


Figure 22-8 illustrates the IICO_CNTL. 


HMT TCT CHT PT 


polif2 3/4} 5/6} 7| 
AMD PST RW 


Figure 22-8. l1CO Control Register (IICO_CNTL) 


HMT Halt Master Transfer 


0 Normal transfer operation. 


1 Issue Stop signal on the liC bus as soon 
as possible to halt master transfer. 


Addressing Mode 

0 Use 7-bit addressing. 
1 Use 10-bit addressing. 
Transfer Count 

00 Transfer one byte. 

01 Transfer two bytes. 
10 Transfer three bytes. 
11 Transfer four bytes. 


Repeated Start 
0 Normal start operation 


1 Use repeated Start function to start 
transfer. 


Chain Transfer 
0 Transfer is only or last transfer. 


1 Transfer is one of a sequence of transfers 
(but not last in sequence). 


Read/Write 

0 Transfer is a write. 

1 Transfer is a read. 

Pending Transfer 

0 Most recent requested transfer is 
complete. 

1 Start transfer if bus is free. 


Preliminary 


If no transfer is in progress, no action is 
taken. 


IICO_CNTL[PT] needs not be set. 


If ICO_MDCNTL[EINT] = 1, an interrupt is 
generated. 


Does not affect slave transfers. 


Completion of a requested transfer causes 
a Stop signal to be issued on the IIC bus. 
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Table 22-2 summarizes IIC interface operation for settings of ICO_CNTL[HMT, RPST, CHT, PT] xis a 
don’t care. 


Table 22-2. IIC Response to IICO_CNTL Field Settings 


1CO_CNTL Fields Resulting Action on IIC Bus 
PT and Inside IIC Interface 
1 


No action taken 


ad oe) 
x aa 
1 Start, Transfer, ACK on last byte, 
Start, Transfer, NACK on last 
x 


Xx NACK on current byte, Stop 


1 x 1 Start, Transfer, NACK on last 
byte, Wait 


Settings of IICO_CNTL[HMT, RPST, CHT, PT] result in the following actions. 


Start IC Start condition generated, if the IIC interface was stopped or waiting. 
Stop IC Stop condition generated; IIC interface enters the Stop condition. 
ACK iC Acknowledge condition generated. 
NACK IC Not Acknowledge condition generated, if performing a read. 
Transfer Requested bytes are transferred. 

i Pause IIC interface enters the Pause state. 

Wait lIC interface enters the Wait state. 


IICO_CNTL{HMT] overrides IICO_CNTL[RPST, CHT]. 
IICO_CNTL[RPST, PT] overrides IICO_CNTL[CHT]. 


22.3.6 ilICO Mode Control Register 


The IICO Mode Control Register (IICO_MDCNTL) sets the major modes of operation on the IIC bus. In 
addition, IICO_MDCNTL can force the data buffers into the empty state. 


In typical applications, IICO_MDCNTL is configured once, during software initialization. Applications 
providing complex error handling may reconfigure this register more often. 


Programming Note: IICO_CLKDIV must be initialized before IICO_MDCNTL. IICO_LSADR and 
IICO_HSADR should also be configured before IICO_MDCNTL. 


Note that the IIC hardware does not implement time-out functions on the lIC bus. Such functions must 
be implemented, in software, by setting IICO_CNTL[HMT] = 1, or setting IICO_XTCNTLSS[SRST] = 1. 


Regarding IICO_MDCNTL[HSCL], a “slave not ready” condition occurs during a slave receive 
operation, if a slave has no free space in its slave data buffer at the start of a write operation, or if the 
slave data buffer fills during the write. In a slave transmit operation, a slave not ready condition occurs 
if a slave has no data in its slave data buffer at the start of a read operation, or if the slave data buffer 
becomes empty during the read. 


a en © eres | DPeanlinnina 
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Using IICO_MDCNTL[HSCL] to handle slave not ready conditions can affect system performance. A 
slave holding the IICSCL signal low guarantees data delivery to or from the requesting master, but 
prevents other masters from performing transfers over the IIC bus. There is no general rule for 
handling slave not ready conditions; each system has its own requirements. 


Figure 22-9 illustrates the I[CO_MDCNTL. 


FSDB EGC ESM EUBS 


FMDB FSM EINT HSCL 


Figure 22-9. IICO Mode Control Register (IICO_MDCNTL) 


FSDB Flush Slave Data Buffer Cleared after buffer is emptied. 
0 Normal operation 
1 Set slave data buffer to empty. 


Flush Master Data Buffer Cleared after buffer is emptied. 

0 Normal operation 

1 Set master data buffer to empty. 

Enable General Call liCO_MDCNTL[ESM] overrides this field; if 
0 Ignore general call on IIC bus. I1CO_MDCNTL[ESM] = 1, a general call is 
1 Respond to general call on IIC bus. ignored. 


Fast/Standard Mode 
0 JIC transfers run at 100 kHz (standard 
mode). 
1 IIC transfers run at 400 kHz (fast mode). 
Enable Slave Mode Program IICO_LSADR and IICO_HSADR 
O Slave transfers are ignored. before setting this field. 
1 Slave transfers are enabled. 


Enable Interrupt 


0 Interrupts are disabled. 
1 Enables interrupts for interrupts enabled 
in IICO_LINTRMSK. 


Exit Unknown IIC Bus State If the IC bus control state machine is ina 
0 Normal operation. known state, setting 
1 IIC bus control state machine exits lICO_MDCNTL[EUBS] = 1 has no effect. 
unknown bus state, if in an unknown 
state. 


Hold IIC Serial Clock Low This field is used only when in slave mode. 


0 If slave is not ready, issue a NACK in 
response to slave transfer request. 

1 If slave is not ready, hold the IICSCL 
signal low until slave is ready. 
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22.3.7 I!CO Status Register 


The !ICO Status register (IICO_STS) provides a summary of the state of the IIC interface and the 
status of any previously requested master transfer. 


During and after transfers, software can read the IICO_STS and IICO_EXTSTS registers to determine 
the state of the IIC interface and the IIC bus. 


Programming Note: !ICO_STS should be the first register read by an interrupt or error handler 
routine. IICO_STS can also be read in a polling loop if software does not use the IIC interrupts. 


Software must clear IICO_STS before requesting another master transfer, except for IICO_STS[SSS]. 
Because IICO_STS[SSS] involves slave transfers, it can remain set. 


Figure 22-10 illustrates IICO_STS. 


SSS MDBSSCMP IRQA 


SLPRMDBF ERR PT. 


Figure 22-10. IICO Status Register (1ICO_STS) 


Slave Status Set Read-only; this field is set when any of the 


0 No slave operations are in progress. following fields are set: 
1 Slave operation is in progress. lCO_XTCNTLSS[SRC, SRRS, SWC, 


SWRS]. 

Sleep Request Read-only. The fIC interface is awakened 

0 Normal operation. when a start signal is detected on the IIC 

1 Sleep mode (CPCO_ER[IIC] = 1). bus or when the CPCO_ER|IIC] is 
cleared. 

Master Data Buffer Status Read-only. 

0 Master data buffer is empty. 

1 Master data buffer contains data. 

Master Data Buffer Full Read-only. 

0 Master data buffer is not full. 

1 Master data buffer is full. 

Stop Complete To clear !1]CO_STS[SCMP], set 


0 No request to halt transfer, or master NCO_STS[SCMP] = 1. 
data transfer, is complete. 

1 Request to halt transfer, or master data 
transfer, is complete. 


Error Read-only. 


0 No error has occurred. 
1 One of the following fields is set: 
IICO_LEXTSTS[LA, ICT, XFRA] = 1. 
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IRQ Active To clear IICO_STS[IRQA]}, set 
0 No IIC interrupt has been sent to the IICO_STS[IRQA] = 1. 

universal interrupt controller (UIC). lf 1}CO_MDCNTL[EINT] = 0, then 
1 An lIC interrupt has been sent to the UIC. lICO_STS[IRQA] is not set. 


Pending Transfer Read-only. 
0 No transfer is pending, or transfer is in 

progress. 
1 Transfer is pending. 


The Error and Pending Transfer, I(CO_STS[ERR, PT], bit fields indicate the success or failure of the 
requested transfer. Table 22-3 interprets the transfer status for all possible combinations of the 
I1CO__STS[ERR,PT] bit fields. 


Table 22-3. IICO_STS[ERR, PT] Decoding 


0 [ 0 Raquented tanstercompletedwinowerow 
[0 [1 [Reauetted vansteris in progress no rors were detecied 
[1 [ 2 | Requested tansfris completo, but not al data was vaste 


Programming Note: Software should not take any action regarding a master transfer unless all 
pending transfers are completed, IICO_STS[PT] = 0. 


If an error requires the IIC interface to send a Stop, the Stop Complete bit field is set, 
IICO_STS[SCMP] = 1. Note that slave operations should be serviced regardless of the state of a 
requested master transfer. 


The IIC interface is placed in sleep mode by setting the CPCO_ER[IIC] via software. Awaking the IIC 
interface is possible directly through software by clearing the CPCO_ER[IIC] or indirectly by detecting 
a Start condition on the IIC bus. When a Start condition is detected, the IIC interface is awakened, 
clearing the CPCO_ER[IIC] and the IICO__STS[SLPR]. 


The IICO_STS[MDBS, MDBF] contain the current status of the Master Data Buffer, I'CO_MDBUF. 
When the IICO_MDBUF contains data, IICO_STS[MDBS] is set. When the I!CO__MDBUF is full, 
1ICO_STS[MDBF] is set. 


The state of the IICO_MDBUF is not instantly recorded by the IICO_STS[MDBS, MDBF]. The delay 
depends on the size of the buffer access. For halfword accesses, these fields are valid on the third 
OPB clock following the transfer. For byte accesses, these fields are valid on the second OPB clock 
following the transfer. 

22.3.8 I1ICO Extended Status Register 

The IICO Extended Status register (IICO_EXTSTS) reports additional IIC status. 


During and after transfers, software can read the IICO_STS and IICO_EXTSTS registers to determine 
the state of the IIC interface and the IIC bus. 


Figure 22-11 illustrates the IICO_EXTSTS. 
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Figure 22-11. 11ICO Extended Status Register (IICO_EXTSTS) 


IRQ Pending IICO_EXTSTS[IRQP] might be set 
0 No IRQ is pending. momentarily while an IRQ moves from 
1 An IRQis active, another IRQ is on-deck, the Pending to the On-deck state. 


and another interrupt-generating An interrupt remains pending, 
condition has occurred. IICO_EXTSTS[IRQP]=1, until the current 


on-deck interrupt becomes active, 
I1CO_STS[IRQD]=0 and 
1ICO_STS[IRQA]]=1. 

Writing 1 to |CO_EXTSTS[IRQP] clears 
the field. 

When the IIC interrupt is disabled, 
I}CO_MDCNTL[IRQP] = 0, 
IICO_LEXTSTS[IRQP] should be ignored. 


Bus Control State Read-only. 


000 Unused; if this value is read, a major 
iC hardware problem occurred. 

001 Slave-selected state; the IIC interface 
has detected and decoded a slave 
transfer request on the IIC bus. 

010 Slave Transfer state; the IIC interface 
has detected but has not decoded a 
slave transfer request on the IIC bus. 

011 Master Transfer state; entered after a 
master transfer request has started on 
the IiC bus. 

100 Free Bus state; the bus is free and no 
transfer request is pending. 

101 Busy Bus state; the bus is busy. 

110 Unknown state; value after IIC reset. 

111 Unused; if this value is read, a major 
1C hardware problem occurred. 
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IRQ On-Deck 


0 No IRQ is on-deck. 

1 An interrupt is active, and another 
interrupt-generating condition has 
occurred. 


IICO_EXTSTS[IRQD] might be set 
momentarily while an IRQ moves from 
the On-deck to the Active state. 

An interrupt remains on-deck, 
IICO_EXTSTS[IRQD = 1, until the cur- 
rent active interrupt is no longer active, 
IICO_STS[IRQA] = 0. 

If ICO_EXTSTS[IRQP] = 1, 
I(CO_EXTSTS[IRQD] is set on the next 
OPB clock. 

Writing 1 to I[CO_EXTSTS[IRQD] clears 
the field. 

When the IIC interrupt is disabled, 
IICO_MDCNTL[IRQP]=0, 
II1CO_EXTSTS[IRQD] should be ignored. 


Lost Arbitration 


O Normal operation. 
1 Loss of arbitration has ended the 
requested master transfer. 


If arbitration is lost, any requested mas- 
ter transaction may have terminated pre- 
maturely. Read data may be incomplete 
and not all write data may have been 
written. 

If arbitration is lost during a repeat start, 
the master may not own the IIC bus. 


Incomplete Transfer 


0 Normal operation. 
1 Some of the bytes of the requested 
master transfer were not transferred. 


For an incomplete transfer, read the 
transfer count, IICO_XFRCNT, to determine 
how bytes were transferred. 


Transfer Aborted 
0 No transfer is pending, or transfer is in 


Transfer aborted. When set toa 1,a 
requested master transfer was aborted by 


progress. 

1 Arequested master transfer was aborted 
by a NACK during the transfer of the 
address byte, or was aborted because 
arbitration was lost. Lost arbitration can 
be caused by the loss of data during the 


a NOT acknowledge during the transfer of 
the address byte. It is also set to a 1 when 
a requested master transfer loses data. 
Lost arbitration can be caused by the loss 
of data during the transfer of the second or 
subsequent data byte. 


transfer of the second or subsequent 
data byte. 


IICO_EXTSTS[IRQP, IRQD] and IICO_STS[IRQA] provide a FIFO for storing interrupts. A new 
interrupt is considered pending, and remains pending while an on-deck interrupt is present. Once the 
on-deck interrupt becomes active, the pending interrupt moves on-deck, and remains on-deck until 
there is no active interrupt. When the active interrupt is cleared, the on-deck (initially pending) 
interrupt becomes active. 


Programming Note: An active interrupt remains active until software clears it. 
\ICO_EXTSTS[BCS] indicates the state of the IIC interface. The field is read-only. 
I\CO_EXTSTS[LA, ICT, XFRA] are cleared when IICO_EXTSTS[PT] = 1. 

Writing 1 to IICO_EXTSTS[IRQP, IRQD, LA, ICT, XFRA] clears these fields. 
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22.3.9 IICO Low Slave Address Register 


The liCO Low Slave Address Register (IICO_LSADR) and IICO_ High Slave Address Register 
(IICO_HSADR) program the slave address of the IIC interface. IICO_HSADR is used only for 10-bit 
addressing, and is not programmed in 7-bit addressing mode. 


When 7-bit addressing is used, IICO_LSADR is written with the slave address; IICO_LHSADR must be 
written with zeros. For 7-bit addressing, IICO_LSADR[A0:A6] contain the address transmitted on the 
IC bus; IICO_LSADR[A7] is a don’t care. 


When 10-bit addressing is used, !1CO_LSADR[A0:A7] contain the second address byte transmitted on 
the IIC bus. . 


Figure 22-6 illustrates the IICO_LSADR. 


AQ A2 A4 = AG 


Ai AS AS = A7 


Figure 22-12. ilICO Low Slave Address Register (IICO_LSADR) 


oe [aaes 
pe [ae [nas 
ef [aes 
pass 8 


Address bit 6 LSb for 7-bit addresses 


ae ae 
Address bit 7 LSb for 10-bit addresses; don't care for 


7-bit addresses 


22.3.10 IICO High Slave Address Register 
For 7-bit addressing, set IICO High Slave Address Register (IICO_HSADR) to 0. | 


To enable 10-bit slave addressing, IICO_HSADR must be programmed to 0b1111 Oyyx, where yy are 
the high-order bits of a 10-bit address and xis a don't care. 


‘ Programming Note: IICO_HSADR is used only for 10-bit addressing, and should be set to 0 for 
7-bit addressing mode. 


Thus, in 10-bit address mode, IICO_HSADR[A6:A7] contain the two highest -order bits of the 10-bit 
address; IICO_HSADR[A7] is a don't care. IlICO_LSADR contains the low-order byte of the 10-bit 
address. 


Figure 22-13 illustrates the I1CO_HSADR. 
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AO A2 A4~= A6 


Al A3 AS = A7 


Figure 22-13. IICO High Slave Address Register (IICO_HSADR) 


fof Ao | Address bit 0 1 for 10-bit addresses 
Address bit 1 1 for 10-bit addresses 
eB AAR, Address bit 2 1 for 10-bit addresses 
(3) [As Address bit 3 1 for 10-bit addresses 
Address bit 4 0 for 10-bit addresses 
Address bit 5 MSb for 10-bit addresses 


ao; 


Address bit 6 Next to MSb for 10-bit addresses 
Address bit 7 Don't care for 10-bit addresses 


Thus, in 10-bit address mode, bits 0:6 are used to decode the first address byte that was transmitted 
on the IIC bus, and bit 7 is in a don’t care state. 


7 


22.3.11 IICO Clock Divide Register 


The IICO Clock Divide Register (IICO_CLKDIV) establishes a reference between the OPB clock and 
the IIC bus serial clock. 


Programming Note: IICO_CLKDIV must be initialized before IICO_MDCTRL. Until IICO_CLKDIV 
is initialized, all IIC bus activity is ignored. 


Figure 22-14 illustrates the IICO_CLKDIV. 


DIVO DIV2 DIV4 DIV6 


DIV1 DIV3 DIVS DIV7 


Figure 22-14. IICO Clock Divide Register (IICO_CLKDIV) 


eo Pove [oR 
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a 
Divisor bit 7 


liCO_CLKDIV divides PPC405GP’s on-chip peripheral bus (OPB) clock to form the base clock for the 
liC bus. . 


Table 22-4 lists the divisor values for several OPB frequency ranges. These divisor values apply for 
standard and fast mode. Select the divisor value by matching the OPB clock frequency to the 
corresponding frequency range in Table 22-4. For example, if the OPB clock frequency is 50MHz, 
select a divisor value of 0x4. 


Table 22-4. IICO Clock Divide Programming 


Divisor 
OPB Frequency Range (MHz) Value 
20 


pe ee 


20<f<30 0x2 


30 <f< 40 0x3 
40<f<50 0x4 
50 < f< 60 0x5 


22.3.12 IICO Interrupt Mask Register 


The IICO Interrupt Mask Register (I1CO_INTRMSK) specifies which conditions can generate an IIC 
interrupt when the IIC interrupt is enabled, IICO_MDCNTL[EINT]=1. 


Figure 22-15 illustrates the I1CO_INTRMSK. 


EIRC EIWC EIHE EITA 


9] 1/2] 8] 4} 5) 6) 7) 


EWCSEIWS EIIC EIMTC 


Figure 22-15. [ICO Interrupt Mask Register (IICO_INTRMSK) 
Enable IRQ on Slave Read Complete The interrupt is activated upon receipt of a 
0 Disable Stop during a slave read on the IIC bus. 


1 Enable liCO_XTCNTLSS[SRC] = 1 indicates a 
Slave Read Complete. 


Enable IRQ on Slave Read Needs Service _ The interrupt is activated upon receipt of a 
0 Disable slave read on the IIC bus and the slave 
1 Enable buffer was empty or went empty and more 
data was requested on the IIC bus. 
Note: IICO_XTCNTLSS[SRS] = 1 
indicates a Slave Read Needs 
Service. 
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Enable IRQ on Slave Write Complete The interrupt is activated upon receipt of a 
0 Disable Stop during a slave write on the IIC bus. 


1 Enable Note: IICOXTCNTLSS[SWC] = 1 indicates 
; a Slave Write Compete. 


Enable IRQ on Slave Write Needs Service _‘The interrupt is activated when the slave 
0 Disable buffer becomes full during a slave write on 
1 Enable the IIC bus. 
Note: IICO_XTCNTLSS[SWS] = 1 
indicates a Slave Write Needs 
Service. 


Enable [RQ on Halt Executed 

0 Disable 

1 Enable 

Enable IRQ on Incomplete Transfer 
0 Disable 

1 Enable 

Enable IRQ on Transfer Aborted 

0 Disable 

1 Enable 

Enable IRQ on Requested Master Transfer 
Complete 


0 Disable 
1 Enable 


22.3.13 IICO Transfer Count Register 


The IICO Transfer Count Register (IICO_XFRCNT) reports the number of bytes transferred on the IIC 
bus during a master or a slave operation. 


Figure 22-16 illustrates the IICO_XFRCNT. 
STC 


MTC 


Figure 22-16. IICO Transfer Count Register (IICO_XFRCNT) 
Reserved 


Slave Transfer Count 


000 0 bytes transferred 
001 1 byte transferred 
010 2 bytes transferred 


011 3 bytes transferred 
100 4 bytes transferred 
101 Reserved 
110 Reserved 
111 Reserved 
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| Reserved 


Master Transfer Count 


000 0 bytes transferred 
001 1 byte transferred 
010 2 bytes transferred 
011 3 bytes transferred 
100 4 bytes transferred 
101 Reserved 

110 Reserved 

111 Reserved 


11CO_XFRCNT[MTC] is cleared when there is a pending transfer, IICO_CNTL[PT] = 1. 
liCO_XFRCNT[STC] is cleared when: 


¢ Aslave operation starts on the IIC bus 
¢ Software indicates the slave does not need service by clearing IICO_XTCNTLSS[SRS] or 


IICO_XTCNTLSS[SWS]. 
22.3.14 IICO Extended Control and Slave Status Register 


The IICO Extended Control and Slave Status Register (IICO_XTCNTLSS) provides additional control 
of lIC interface functions and reports the status of slave operations. 


Figure 22-17 illustrates the IICO_XTCNTLSS. 


SRC SWC SBDD EPI 


SRS SWS SDBF SRST 


Figure 22-17. IICQ Extended Control and Slave Status Register (IICO_XTCNTLSS) 


Slave Read Complete Check whether the read operation emptied 


O Normal operation, or IICO_SDBUF. 


ItCO_MDCNTL[HSCL] = 0, IICO_SDBUF 
is empty, and a read operation is in 


progress. 
1 A NACK or Stop condition was received 

over the IIC bus, or a repeated Start 

condition ended a read operation. 
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Slave Read Needs Service 

0 Normal operation or slave read does not 
need service. 

1 IICO_SDBUF is empty, and a read 
operation was requested on the IIC bus. 

The set condition may also indicate that 

lICO_SDBUF is empty due to a slave read 

and additional data is requested by the 

master. 


Slave Write Complete 

0 Normal operation or slave write in 
progress. 

1 A Stop signal was received during a write 
operation, or a repeated Start condition 
ended a write operation. 

Slave Write Needs Service 

0 Normal operation or slave write does not 
need service. 

1 IICO_SDBUF is full during a slave write. 


Slave Data Buffer Has Data 
0 IICO_SDBUF is empty 

1 ItCO_SDBUF contains data 
Slave Data Buffer Full 


0 IlICO_SDBUF is not full 
1 IICO_SDBUF is full 


Preliminary 


1. If ICO_MDCNTL[HSCL]=0 and 
IICO_SDBUF contains no data, the slave 
will issue a NACK and 
iiCO_XTCNTLSS[SRS] is set. 


2. If ICOMDCNTL[HSCL]=0, and 
I1CO_SDBUF contains data, the slave will 
send the data. IICO_XTCNTLSS[SRS] is 
not set unless the master request 
additional data. 


3. If ICO_MDCNTL[HSCL]=0, and 
1|CO_SDBUF contains no data, the slave 
will hold IICSCL low to indicate the slave is 
busy. IICO_XTCNTLSS[SRS§] is set until the 
1ICO_SDBUF is filled. Once filled, IICSCL is 
released, IICO_XTCNTLSS[SRS] is 
cleared, and the slave sends the data. 


4. If ICO_MDCNTL[HSCL]=1, and 
!ICO_SDBUF contains data, the slave will 
send the data. IICO_XTCNTLSS[SR§] is 
not set unless the master requests 
additional data. ° 


1. If IICO_LMDCNTL[HSCL] = 1 and 
IICO_SDBUF is full, the slave will hold 
IICSCL low to indicate the slave is busy. 
IICO_XTCNTLSS[SWS] is set until 
IICO_SDBUF is empty. Once empty, 
IICSCL is released, 
lICO_XTCNTLSS[SWS] is cleared, and the 
slave receives the data. 


2. If ICO_MDCNTL[HSCL] = 0 and 
I1CO_SDBUF is full, the slave will issue a 
NACK and IICO_XTCNTLSS[SWS} is set. 


Read-only 


Read-only 


1IC Bus Interface 
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Enable Pulsed IRQ on Transfer Aborted 


0 The internal liC interrupt signal to the 
UIC remains active until the status is 
cleared, IICOSTS[IRQA] =0. 

1 The internal NIC interrupt signal to the 
PPC405GP UIC is active for one OPB 


clock cycle. 


Soft Reset 


0 Normal operation 
1 Soft reset 


Writing a 1 to IICO_XTCNTLSS[SRC, SRS, SWC, SWS] clears these fields. 


Care must be used when changing !ICO_XTCNTLSS[EP]]. If this field changes (from 1 to 0 or from 
0 to 1) while an interrupt is active, the IIC interrupt signal is asserted to the universal interrupt 
controller (UIC). 


The IICO_XTCNTLSS[SBSS, SDBF] contain the current status of the Slave Data Buffer, IICO_SDBUF. 
When the IICO_SDBUF contains data, IICO_XTCNTLSS[SBDD] is set. When the IICO_SDBF is full, 
I1CO_XTCNTLSS[SDBF] is set. 


The state of the IICO_SDBUF is not instantly recorded by the IICO_XTCNTL[SBSS, SDBF]. The delay 
depends on the size of the buffer access. For half-word accesses, these fields are valid on the third 
OPB clock following the transfer. For byte accesses, these fields are valid on the second OPB clock 
following the transfer. 


If any of the following fields: IICO_XTCNTLSS[SRC, SRS, SWC, SWS] = 1 and 
I}CO_MDCNTL[HSCL] = 0; no new slave operations will be accepted over the IIC bus. A NACK is 
issued until IICO_XTCNTLSS[SRS] or IICO_XTCNTLSS[SRS}, and IICO_XTCNTLSS[SRS] or 
lICO_XTCNTLSS[SRS], are cleared. 


Soft reset, IICO_XTCNTLSS[SRST], provides a last means of recovery from IIC interface or IIC bus 
failure. Once enabled, soft reset completely resets the IIC interface. All IIC registers are affected. All 
transmissions from the IIC interface are terminated. Enabling soft reset during an IIC transmission 
may improperly terminate the transmission and hang the IIC bus. 


22.3.15 IlICO Direct Control Register 


The IICO Direct Control Register (IICO_DIRECTCNTL), which controls and monitors the IIC serial 
clock (IICSCL) and serial data (IICSDA) signal, is used for error recovery when a malfunction is 
detected on the IIC interface. 
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Figure 22-18 illustrates the IICO_DIRECTCNTL. 


SDAC MSDA 


ItCSDA Output Control 
Directly controls the IICSDA output. 


0 IICSDA is a logic 0 
1 IICSDA is a logic 1 


IICSCL Output Control 
Directly controls the IICSCL output 


0 IICSCL is a logic 0 
1 IICSCL is a logic 1 


Monitor IICSDA Read-only 
Used to monitor the I!CSDA input 

0 IICSDA is a logic 0 

1 IICSDA is a logic 1 

Monitor IICSCL. Used to monitor the Read-only 
IICSCL input. 


0 IICSCL is a logic 0 
1 IICSCL is a logic 1 


IICO_DIRECTCNTL[SDAC, SCC] can be written to contro! the IICSDA and IICSCL signals. When 
controlling the IICSDA and IICSCL signals directly, the IIC controller must be placed in the reset state, 
ICO_XTCNTL[SRST] = 1. 


ItCO_DIRECTCNTL[MSDA, MSC] are used to verify that IICO_DIRECTCNTL[SDAC, SCC] were 
written successfully, and that the IICSCL signals can be controlled. If IICO_DIRECTCNTL[MSDA, 
MSC] do not correspond to IICO_DIRECTCNTL[SDAC, SCC], respectively, toggle IICSCL repeatedly 
to regain control. ; 


liCO_DIRECTCNTL[SDAC, SCC, MDSA, MSC] = 1 after a chip or system reset. A Soft Reset, 
IICO_XTCNTLSS[SRST] = 1, does not affect the state IICO_DIRECRCNTL. 


22.4 Interrupt Handling 


The IIC interface can handle interrupts in two ways. The processor can poll IICO_STS[SSS, PT]. 
Alternatively, software can use IIC interface interrupts. 


I1CO_MDCNTL[EINT] and the interrupt mask bits in the I[CO_INTRMSK control interrupts. 
IICO_XTCNTLSSJ[EPI] controls whether the lIC IRQ is set at a 1-clock pulse or at a constant level. 
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The IIC controller guarantees that the interrupt is activated after the state of the has been set to 
ensure that interrupt handlers read stable values from the IIC interface registers. IIC interrupts can 
generate interrupt requests to the UIC. If enabled properly in the UIC, an IIC interrupt can interrupt the 
processor core. See “Interrupt Handling in the Processor Core” on page 10-22 for more information. 


Because a master operation can have one interrupt and a slave operation can have two interrupts, the 
lIC interface can queue up to three interrupts. The current interrupt is referred to as the active 
interrupt. The first interrupt in the queue is referred to as the on-deck interrupt; the second queued 
interrupt is called the pending interrupt. The queue holds multiple interrupts until the active interrupt is 
cleared by writing a 1 to IICO_STS[IRQA]. When an active interrupt is cleared, the on-deck interrupt 
becomes the active interrupt and the pending interrupt becomes the on-deck interrupt. 


Status associated with an IIC interrupt is immediately set in its corresponding register. Thus, an 
interrupt handler can see the status for the current and the queued interrupts. This can occur if, for 
example, the interrupt handler is itself interrupted before reading any status in the IIC registers. Ifa 
second or third interrupt occurs before the interrupt handler regains control, the status seen at this 
time will include status associated with all three interrupting conditions. In this case, the interrupt 
handler cannot determine the first interrupting condition; all the interrupts will appear to have been 
merged. Note that if the interrupt handler is intelligent enough to handle and clear all conditions 
currently set in the status, instead of choosing only one interrupt and servicing it, the routine would 
not see status for the subsequent interrupts. 


A more typical situation involves the case where an interrupt handler has read the IIC status for the 
active interrupt and a second (on-deck) interrupt occurs. In this case, the status changed after it was 
first read by the interrupt handler. Because status bits are cleared by writing a 1, no ill effects, such as 
lost status information, result from this case. To illustrate, consider that the interrupt handler might 
have read IICO_XTCNTLSS = 0x10 when the first interrupt occurred. Then, sometime later, the 
routine clears this status by writing 0x10 back to the IICO_XTCNTLSS. If the slave write operation 
completes while the register is read and written, the register will contain a 0x30 when the 0x10 is 
written. Because writing 0 to a bit has no effect after it is set to 1, the slave write complete status is not 
lost. 


Under certain conditions, the IIC interface merges slave read (write) needs service and slave 

read (write) complete interrupts into one interrupt. If a slave read (write) needs service interrupt is 
active, or queued, and a slave read (write) complete interrupt occurs, and IICO_XTCNTLSS has not 
yet been read, the two interrupts are merged into a single interrupt. This merge function is performed 
in the IIC interface logic, and is not under software control. 


22.5 General Considerations 


1. After a reset, the IIC interface enters the unknown IIC bus state. This state is exited when either 
activity is seen on the bus or when the exit unknown IIC bus state bit, in the mode contro! register, 
is set to a 1. If the IIC interface is being used in a single master system as the master, then the exit 
unknown |IC bus state bit must be used to force the logic out of the unknown state. 


2. Once a byte is written into either the master or slave buffer, a total of four OPB clock periods must 
occur before the data can be read. Flushing the master or slave buffer also requires four OPB clock 
periods to complete. 
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3. The master and slave buffers are actually 4 x 1 byte-wide FIFOs. Exercise care when using master 
and slave buffers. As an example, consider the case where one byte of data is written on the IIC 
bus. The data is first written into the master or slave buffer. After four OPB clock cycles the data is 
placed on the IIC bus. There is no way to verify data in the buffer without disturbing the IIC 
transaction. The act of verification requires removing the data. If the data is removed, invalid data is 
placed on the IIC bus. 


4. Use care when monitoring the IlICO_XCNTLSS[SBDD] or to II'CO_STS[MDBS] to determine when 
data is present. These bits are set to 1 when the buffer contains data in any stage. Consider the 
case where the master buffer is empty prior to being loaded with a byte received over the IIC bus. 
The byte enters the fourth stage of the buffer and the IICO_STS[MDBS] is set to 1. Stages 1, 2, 
and 3 do not contain data. Therefore, the data is not available for four OPB clock cycles. Any 
attempt to prematurely read the data yields invalid data. 


5. When responding to a slave needs service request, manage the data first. Read data out of the 
slave buffer, IICO_SDB, for slave reads or write data into the IICO_SDB for slave writes. Next clear 
the slave needs service request. For reads, clear IICO_XTCNTLSS[SRS)]. For writes, clear 
IICO_XTCNTLSS[SWS]. Last, clear the active interrupt, ICO_STS[IRQA] =0. 


6. There is no timeout function implemented in the IIC interface. If this type of error recovery function 
is needed, it must be implemented in software. 


7. Avoid the situations listed in Section 7.2 of the Philips Semiconductors FC Specification, dated 
1995. For your convenience, the section is summarized as follows: 


If multiple masters can be simultaneously involved in a transfer to the same address, or device, 
then the design of the system must be done in such a way that arbitration between: 


— A repeated Start condition and a data bit does not occur. 
— A Stop condition and a data bit does not occur. 
~— A repeated Start condition and a Stop condition does not occur. 


One example of a not allowed case would be if one master were to write 1 byte while another device 
wrote 2 bytes to the same device. In this situation, the first master would issue a Stop while the 
second master sends the MSb of the second data byte. 
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Chapter 23. GPIO Operations 


This chapter describes the General Purpose I/O (GPIO) controller located on the on-chip peripheral 
bus (OPB) of the PPC405GP. The GPIO controller allows flexible control of up to 23 multiplexed I/Os 
with user-defined functions. 


23.1 GPIO Controller Overview 


The GPIO Controller is an OPB macro that controls up to 23 bidirectional module I/O pins with user- 
programmable functions. Each of these IOs are multiplexed with other signals to reduce the quantity 
of module I/O on the PPC405GP package. Control for this multiplexing is performed using the 
CPCO_CRO register. See “External Module Signals” on page 23-3 for more information. 


The GPIO outputs can be programmed to emulate an open drain driver. 
All module I/O inputs are synchronized to the OPBClk before being stored in the Input register. 


All registers, except the Input Register, are both read and write accessible. The Input register is read- 
only. Registers provide direct control of all GPIO Controller functions. 


All register bits and core input and output signals maintain a bit-for-bit correspondence. For example, 
GPIO_Out[20] is controlled by GPIOO_OR Register Bit 20. 


23.2 Features 


The GPIO Controller has the following features: 
¢ Direct control of all functions from registers programmed via memory-mapped addresses 
¢ Control of 23 bidirectional GPIO module pins 

— Each GPIO output has programmable three-state control 

~— Each GPIO output is separately programmable to emulate an open drain driver 


~ Each GPIO input is observable from a register bit 
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23.3 GPIO Interface Signals 


GPIO Macro Package 


Open Drain (@PI00_oDR) 


GPIO_TS_Control' TS 
| 


GPIO_Out A | 


Output Register (GPIOO_OR) 


> 


Alternate 
Outputs 
(chip selects, 
trace signa!) 


Three-state Control (GPIOO_TCR) 


DCR CPCO_CRO Register 


GPIO_In 
Input Register (GPIO0_!R) 


| 


Alternate 
Inputs 
(interrupt 
requests) 


Figure 23-1. GPIO Functional Block Diagram 
The following sections discuss the GPIO interface signals. 


23.3.1 External! Macro Signals 


All registers within the GPIO Controller are synchronous to OPBCIk, and all GPIO_In inputs are 
synchronized to OPBCIk before being stored. 


Table 23-1. Macro I/O Interface Signals 


Signal Name 
GPIO_In(0:23) Input to the GPIO Controller directly from Pin Z (Receiver Output). 
The bi-directional three-state driver books must be in the high 
impedance state in order to receive valid data as input from off chip. 


GPIO_Out(0:23) Data outputs from the GPIO Controller. These signals are designed to 
tie directly to Pin A (Driver Data Input). 


GPIO_TS_Control(0:23) Three-state control outputs from the GPIO Controller macro. These 
signals are designed to tie directly to each corresponding module I/O 
Pin TS (Driver Three-State Control). 
0 = High Impedance. 
1 = Active (drive GPIO_Out signal) 


23-2 PPC405GP User’s Manual 


iminar ry 


U 
g. 


r 


23.3.2 External Module Signals 


The GPIO signals do not have dedicated module pins. The module pins, used by the GPIO signals, 
are shared (multiplexed) with other signals. The Chip Control Register 0 (CPCO_CRO) controls the 

way in which the signal on a shared pin is interpreted. The following sections provide details of the 

CPCO_CRO register bit settings and the function of the GPIO registers. 


The GPIO signals are multiplexed with the nine instruction trace signals, seven of the eight EBC chip 
selects, and the seven external interrupt request inputs. Multiplexing is controlled by the setting of 
CPCO_CRO[4:18] as follows: 


GPIO Enable/Disable 


Figure 23-2. CPCO_CRO0 Bits Controlling GPIO 


CPU Trace Enable Trace interface cannot be used when GPIO 
0 GPIO1-9 are enabled is enabled. 
1 GPIO1-9 are disabled 


GPIO 10 Enable 
0 Enable PerCS1 as a chip select 
1 Enable PerCS1 as GPIO10 


GPIO 11 Enable 
0 Enable PerCS2 as a chip select 
1 Enable PerCS2 as GPIO11 


GPIO 12 Enable 
0 Enable PerCS3 as a chip select 
1 Enable PerCS3 as GPIO12 


GPIO 13 Enable 


0 Enable PerCS4 as a chip select 
1 Enable PerCS4 as GPIO13 


GPIO 14 Enable 
0 Enable PerCS5 as a chip select 
1 Enable PerCS5 as GPIO14 


GPIO 15 Enable 
0 Enable PerCS6 as a chip select 
1 Enable PerCS6 as GPIO15 


GPIO 16 Enable 
0 Enable PerCS7 as a chip select 
1 Enable PerCS7 as GPIO16 
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Figure 23-2. CPCO_CRO Bits Controlling GPIO (continued) 


GPIO 17 Enable The purpose of GPIO_17_EN through 
0 Enable interrupt !RQ0 as an interrupt GPIO_23_EN is to isolate the interrupt 
1 Enable interrupt IRQ0 as GPIO17 controller from activity on a shared pin 
when that pin is being used as a GPIO. For 
instance, when G17E is set to a 1, IRQO at 
the UIC will always be forced to a zero. 
Note: Setting G17E to a 0 will not prevent 
GPIO channel 17 (if configured as an 
output) from creating contention with — 
the off-chip source of the IRQ input. 
Therefore, be sure to leave the shared 
GPIO channel disabled when using 
the pin as an interrupt input. 


GPIO 18 Enable 
| O Enable interrupt IRQ1 as an interrupt 
1 Enable interrupt IRQ1 as GPIO18 


GPIO 19 Enable 
0 Enable interrupt IRQ2 as an interrupt 
1 Enable interrupt IRQ2 as GPIO19 


GPIO 20 Enable 
0 Enable interrupt IRQ3 as an interrupt 
1 Enable interrupt IRQ3 as GPIO20 


GPIO 21 Enable 
0 Enable interrupt IRQ4 as an interrupt 
‘1 Enable interrupt IRQ4 as GPIO21 


GPIO 22 Enable 


0 Enable interrupt IRQ5 as an interrupt 
1 Enable interrupt 1RQ5 as GPIO22 


GPIO 23 Enable 
0 Enable interrupt IRQ6 as an interrupt 
1 Enable interrupt IRQ6 as GPIO23 


In all cases when a pin is used as a GPIO, it is necessary to configure the appropriate bit in this 
register as well as the GPIO registers located in the GPIO controller. 


23.4 Clock and Power Management 


The GPIO Controller macro supports Clock and Power Management. Unconditional Sleep (Class 1) 
power management is implemented, and is enabled by setting the CPCO_ER[GPIO] bit. 


23.5 GPIO Register Overview 


The following table contains a summary of the GPIO registers. 


Table 23-2. GPIO Register Summary 


[MMO Address [Mnemonic ___—Descrplion_—_—_—*(|_—Ansess Mode | 
—ersoari [Groom [eriommt ————SSSC~dT SSC 


Note: All GPIO registers are memory-mapped and accessed via load/store instructions at the address of the 
register. 


23.5.1 GPIO Register Reset Values 


When a system reset occurs, each register in the GPIO macro, except GPIOO_IR, is reset to 0. All 
outputs are in the high-impedance state. GPIOO_IR is not reset because it is always clocked and 
always follows the GPIO_In state. 


23.5.2 Detailed Register Description 


The following sections provide a bit description of the GPIO registers. All registers are accessed from 
the OPB. The GPIOO_IR register is read-only; all other registers are both read and write accessible. 
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Figure 23-3. GPIO Registers 
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23.5.2.1 GPIO Output Register (GPIOO_OR) 


The state of each bit in the GPIOO_OR Register may be reflected in the corresponding GPIO 
Controller macro output signal GPIO_Out. 


23.5.2.2 GPIO Three-State Control Register (GPIOO_TCR) 


Each bit in the GPIOO_TCR Register controls the corresponding GPIO_TS_Control macro output 
signal.Each bit in the GPIOO_TCR Register controls the corresponding GPIO_TS_Control macro 
output signal. 


When 0, GPIO_TS_Control forces the module I/O drivers into the high-impedance state. 


Preliminary GPIO Operations 23-5 


The state of the GPIO_Out signal driving Pin A (Driver Data Input) of the module I/O three-state driver 
is irrelevant when the driver is in the high impedance state. High impedance take precedence over 
data output signals. 


23.5.2.3 GPIO Open Drain Register (GPIOO_ODR) 


The GPIO Open Drain Register configures the module I/O three-state driver to emulate open drain 
drivers on a bit-by-bit basis. This is done by controlling the GPIO_Out and GPIO_TS_ Control signals, 
via the GPIOO_OR and GPIOO_TCR registers, respectively. 


When programmed to 1, each bit in the GPIOO_ODR register forces the corresponding GPIO_Out 
signal to 0 and the corresponding GPIO_TS_Control signal to the inverted GPIO_Out signal. In this 
case, the value of the corresponding bit in the GPIOO_TCR register is ignored. The open drain logic is 
shown in the table below. 


When emulating an open drain driver, the module I/O driver never drives a 1 level. It either drives a O 
level or it is in the high impedance state emulating an open drain 1 level. 


Table 23-3. GPIOO_ODR Control Logic 


GPIOO_ODR| GPIOO_OR GPIO_Out GPIOO_TCR | GPIO_TS_Control | Module I/O Three- 
Bit Bit Macro Output Bit Macro Output State Driver 


Forced to high- 
impedance 
state 


Forced to high- 
impedance 
state 


23.5.2.4 GPIO Input Register (GPIOO_IR) 


The state of each bit in the GPIOO_IR Register reflects the corresponding GPIO Controller macro 
input signal GPIO_In. All GPIO_In signals are synchronized to OPBClk before being stored in the 
GPIOO_IR Register. The GPIOO_!R Register is read-only and does not change during a read access. 


All bi-directional three-state drivers must be in the high-impedance state in order to receive valid data 
as input from off chip. 


ers Manual Preliminary 


Index 


A 

AA field 
conditional branches 3-35 
unconditional branches 3-34 

access protection 
cache instructions 6-15 
string instructions 6-16 
virtual mode 6-12 

add 24-6 
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defined 4-6 
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CCRO 25-15 
character mode 
NS16450 21-1 
clrislwi 24-147 
clristwi. 24-147 
clrlwi 24-147 
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cror 24-44 
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functions 3-7 
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overview 3-26 , 
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illustrated 3-26 
summarized 1-10 
DBCR 12-9 
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functions 4-10 
debi 24-50 
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functions 4-10 
debst 24-51 
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functions 4-10 
dcbz 24-54 
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decci 24-56 
data storage interrupts 6-16 
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DCPO_ADDRO-DCPO_ADDR3 14-5, 25-40 
DCPO_CFG 14-6, 25-41 
DCPO_CFGADDR 25-42 
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accessing 3-21 
DCPO_CFGDATA 25-43 
DCPO_CFGDATA (Decompression Controller Data 
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DCPO_ESR 14-8, 25-44 
DCPO_ID 14-6, 25-46 
DCPO_ITORO-DCPO_ITOR3 14-4, 25-47 
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DCPO_PLBBEAR 14-7, 25-49 
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DCPO_VER 14-7, 25-51 
dcread 24-57 
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functions 4-11 
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summary 1-11 

uses for 3-16 
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cachability control 4-8 
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load strategies 4-7 
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pipeline stalls 4-16 
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tag information in GPRs 4-16 

write strategies 4-7 
DCWR 25-52 
DCWR (Data Cache Write-through Register) 

controlling write strategies 4-7 

write-through policy 6-18 
DEAR 25-54 
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illustrated 10-34 
Debug Control Register (DBCR) 12-9 
Debug Control Register 0. See DBCRO 
debug interrupts 

register settings 10-44 
debugging 
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DCU 4-15 

debug events 12-16 
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trace status port 12-5 
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Decompression Controller Address Register. See 
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Decompression Controller Data Register. See 


DCPO_CFGDATA 
Device Control Registers. See DCRs 
device-paced transfers 16-11 
bus timeout error 16-11 
dirty cache line, defined 4-16 
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divw. 24-59 
divwo 24-59 
divwo, 24-59 
divwu 24-60 
divwu. 24-60 
divwuo 24-60 
divwuo. 24-60 
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initiated by software 18-21 
DMA operations 
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interrupts 18-15 
DMAO_CRO-DMA0_CR3 18-8, 25-55 
DMA0_CTO-DMA0O_CT3 18-11, 25-58 
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EBCO_CFGADDR (Peripheral Controller Address 


Register) 
accessing 3-20 
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EMACO_IAHT1-EMACO_IAHT4 25-82 
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ESR (Exception Syndrome Register) 
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EVPR 25-89 
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illustrated 10-31 , 
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betr 24-27 
betrl 24-27 
bdnz 24-21 
bdnza 24-21 
bdnzf 24-21 
bdnzfa 24-21 
bdnzfkr 24-31 
bdnzfl 24-21 
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bdnzflrl 24-31 
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bdnzta 24-21 
bdnztl 24-21 
bdnztla 24-21 
bdnztlr 24-31 
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bgt 24-23 

bgta 24-23 
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bgtirl 24-32 
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birl 24-30 
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bnua 24-25 
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bnulr 24-33 for mtcrf 24-116 


bnulrl 24-33 formtspr 24-120 
bsalr 24-33 fornor, nor. 24-139 
bso 24-25 for or, or. 24-140 
bsoa 24-25 forori 24-142 


bsoctr 24-28 
bsoctrl 24-28 


for rlwimi, rlwimi. 


for rlwinm, rlwinm. 24-147 
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clrislwi. 24-147 rotlw 24-150 
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cmplwi 24-37 slwi 24-148 
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for addi 24-9 subic. 24-11 
for addic 24-10 subis 24-12 
foraddic. 24-11, 24-115 . subo 24-176 
foraddis 24-12 subo. 24-176 
for bc, bea, bel, bcla 24-21 tblrehi 24-185 
for bectr, bectrl 24-27 tblrelo 24-185 
for belr, belrl 24-30 tblwehi 24-189 
forcmp 24-34 tblwelo 24-189 
forcmpi 24-35 trap 24-191 
forcmpl 24-36 tweq 24-191 
forcmpli 24-37 tweqi 24-194 
forcreqy 24-41 twge 24-191 
forcrnor 24-43 twgei 24-194 
forcror 24-44 twgle 24-191 
for crxor 24-46 twgt 24-191 
formfspr 24-113 twgti 24-194 
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twle 24-191 
twlei 24-194 
twigei 24-194 
twigt 24-191 - 
twigti 24-194 
twile 24-192 
twllei 24-194 
twllt 24-192 
twilti 24-194 
twing 24-192 
twingi 24-194 
twin! 24-192 
twinli 24-195 
twit 24-192 
twiti 24-195 
twne 24-192 
twnei 24-195 
twng 24-192 
twngi 24-195 
twnl 24-192 
twnli 24-195 
extended mnemonics for 
tlbre 24-189 
external bus controller. See EBC 
external bus master 16-17 
arbitration 16-17 
interface 16-17 
external interrupts 
programming note 10-38 
register settings 10-39 
extlwi 24-148 
extlwi. 24-148 
extrwi 24-148 
extrwi. 24-148 
extsb 24-63 
extsb. 24-63 


F 
features 
DCU 4-1 
ICU 4-1 
fetcher, improved performance of 4-3 
FIFO 21-15 
FIFO control register 21-7 
FIFO operation 
interrupt mode 21-15 
polled mode 21-16 
FIT 11-5 
FIT (fixed interval timer) 
interrupts, causes 10-42 
interrupts, register settings 10-42 
fixed interval timer 11-5 
fixed interval timer. See FIT 


Fixed Point Exception Register. See XER 


G 


general interrupt handling registers, listed 10-27 


general purpose registers. See GPRs 
GPIOO_IR 25-90 

GPIOO_IRO 23-1 

GPIOO_ODR 25-91 

GPIOO_OR 25-92 
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GPIOO_TCR 25-93 
GPRO-GPR31 25-94 


- GPRs (general purpose registers) 


interrupt control instructions 3-52 
overview 3-6 

“summary 1-10 

guarded (G) storage attribute 

controlled by SGR_ 6-19 

preventing speculative accesses 3-37 
virtual mode 6-6 


l 
| storage attribute. See caching inhibited (1) storage 
attribute 
IAC1-IAC4 25-67, 25-95 
IAC1-IAC4 12-14 
icbi 24-65 
data storage interrupts 6-16 
function 4-9 
icbt 24-66 
data storage interrupts 6-16 
function 4-9" 
iccci 24-67 
function 4-9 
when use not recommended 6-16 
ICCR 25-96 
ICCR (Instruction Cache Cachability Register) 
controlling the | storage attribute 6-19 
controls cachability 4-4 
ICDBCR (Instruction Cache Debug Control Register) , 
programming note 4-15 
ICDBDR 25-98 
ICDBDR (Instruction Cache Debug Data Register) 
illustrated 4-14, 25-98 
icread 24-68 
controlled by CCRO 4-11 
function 4-9 
programming note 4-15 
ICU (instruction cache unit) 
cachability control 4-4 
cache line fills 4-3 
coherency 4-5 
features 4-1 
instruction flow, illustrated 4-3 
instructions 4-9 
least-recently-used (LRU) policy 4-2 
organization 4-2 
synchronization 4-5 
synonyms 4-4 
IC 22-1 
IICO_LCLKDIV 25-99 
IICO_LCNTL 25-100 
IICO_DIRECTCNTL 25-101 
IICO_LEXTSTS 25-102 
IICOLHMADR 25-104 
IICOLHSADR 25-105 
IICO_LINTRMSK 25-106 
IICO_LLMADR 25-107 
IICO_LSADR 25-108 
liCO_MDBUF 25-109 
IICOLMDCNTL 25-110 
IICO_LSDBUF 25-111 


Preliminary 


ICO_STS 25-112 entlzw. 24-38 


Preliminary 


IICO_XFRONT 25-113 crand 24-39 
IICO_XTCNTLSS 25-114 crande 24-40 
imprecise interrupts 10-22 creqv 24-41 
initialization crnand 24-42 
code example 8-16 crnor 24-43 
of processor 8-14 cror 24-44 
requirements 8-15 crore 24-45 
sequence 8-15 crxor 24-46 
inslwi 24-146 dcbf 24-49 
insiwi. 24-146 debi 24-50 
insrwi 24-146 debst 24-51 
insrwi. 24-146 debt 24-52 
instruction dcbz 24-54 
add 24-6 decci 24-56 
add. 24-6 ; dcread 24-57 
adde 24-7 divww 24-59 
adde. 24-7 divw. 24-59 
addco 24-7 divwo 24-59 
addco. 24-7 divwo. 24-59 
adde 24-8 divwu 24-60 
_ adde. 24-8 divwu. 24-60 
addeo 24-8 divwuo 24-60 _ 
addeo. 24-8 divwuo. 24-60 
addi 24-9 eieio 24-61 
addic 24-10 eqv 24-62 
addic. 24-11 eqv. 24-62 
addis 24-12 extsb 24-63 
addme 24-13 extsb. 24-63 
addme. 24-13 icbi 24-65 
addmeo 24-13 icbt 24-66 
addmeo. 24-13 iccci 24-67 
addo 24-6 icread 24-68 
addo. 24-6 isyne 24-70 
addze 24-14 Ibz 24-71 
addze. 24-14 Ibzu 24-72 
addzeo 24-14 lbzx 24-74 
addzeo. 24-14 lha 24-75 
and 24-15 Ihau 24-76 
and. 24-15 lhax 24-78 
ande 24-16 Inbrx 24-79 
andc. 24-16 Ihz 24-80 
andi. 24-17 Inzu 24-81 
andis. 24-18 Inzux 24-82 
b 24-19 lhzx 24-83 
ba 24-19 Imw 24-84 
be 24-20 Iswi 24-85 
bea 24-20 Iswx 24-87 
bectr 24-26 lwarx 24-89 
bectrl 24-26 lwz 24-91 
bel 24-20 Iwzu 24-92 
bela 24-20 Iwzux 24-93 
belr 24-30 lwzx 24-94 
belrl 24-30 macchw 24-95 
bl 24-19 macchws 24-96 
bla 24-19 macchwsu 24-97 
cmp 24-34 macchwu 24-98 
cmpi 24-35 machhw 24-99 
cmp! 24-36 machhwsu 24-101 
cmpli 24-37 machhwu 24-102 
entlzw 24-38 maclhw 24-103 


Index 


maclhws 24-104, 24-138 
macihwu 24-106 
merf 24-107 
merxr 24-108 
mfcr 24-109 
mider 24-110 
mfimsr 24-111 
mfspr 24-112 
mtcrf 24-116 
mtder 24-117 
mispr 24-119 
mulchw 24-121 
mulchwu 24-122 
mulhhw 24-123 
mulhhwu 24-124 
mulhwu 24-126 
mulhwu. 24-126 
mullhw 24-127 
mulihwu 24-128 
mulli 24-129 
mullw 24-130 
mullw. 24-130 
mullwo 24-130 
mullwo. 24-130 
nand 24-131 
nand. 24-131 
neg 24-132 
neg. 24-132 
nego 24-132 
nego. 24-132 
nmacchw 24-133 
nmacchws 24-134 
nmachhw 24-135 
nmachhws 24-136 
nmaclhw 24-137 
nmacihws 24-138 
nor 24-139 

nor. 24-139 

or 24-140 

or. 24-140 

orc 24-144 

orc. 24-141 

ori 24-142 

oris 24-143 

rici 24-144 

fi 24-145 
rlwimi 24-146 
riwimi. 24-146 
rwinm 24-147 
rlwinm. 24-147 
rlwnm = 24-150 
rlwnm, 24-150 
sc 24-151 

slw 24-152 

slw. 24-152 
sraw 24-153 
sraw. 24-153 
srawi 24-154 
srawi. 24-154 
srw 24-155 
srw. 24-155 
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stb 24-156 
stbu 24-157 
stbux 24-158 
stbx 24-159 
sth 24-160 
sthbrx 24-161 
sthu 24-162 
sthux 24-163 
sthx 24-164 
stmw 24-165 
stswi 24-166 
stswx 24-167 
stw 24-169 
stwbrx 24-170 
stwex. 24-171 
stwu 24-173 
stwux 24-174 
stwx 24-175 
subf 24-176 
subf. 24-176 
subfe 24-177 
subfc. 24-177 
subfco 24-177 
subfco. 24-177 
subfe 24-178 
subfe. 24-178 
subfeo 24-178 
subfeo. 24-178 
subfic 24-179 
subfme 24-180 
subfme. 24-180 
subfmeo 24-180 
subfmeo. 24-180 
subfo 24-176 
subfo. 24-176 
subfze 24-181 
subfze. 24-181 
subfzeo 24-181 
subfzeo. 24-181 
sync 24-182 
tlbia 24-183 
tlbre 24-184 
tlbsx 24-186 
tlbsx. 24-186 
tlbsync 24-187 
tlbwe 24-188 
tw 24-190 

twi 24-193 
wrtee 24-196 
wrteei 24-197 
xor 24-198 
xori 24-199 


instruction cache array, improved fetcher performance 


4-3 


Instruction Cache Cachability Register. See |ICCR 
Instruction Cache Cachability Register. See ICCR 
Instruction Cache Debug Data Register. See ICDBDR 
instruction cache synonym, defined 4-4 


instruction cache unit. See ICU 
instruction fetching 
from little endian storage 3-31 


instruction fields A-41 
instruction formats 24-2, A-41 
diagrams A-43 
instruction forms A-41, A-43 
instruction queue 
illustrated 3-34 
role in processing instructions 3-33 
instruction set 
brief summaries by category 3-47 
for embedded controllers 3-48 
instruction set portability 24-1 
instruction set summary 
cache control 3-52 
CR logical 3-51 
instruction storage interrupts 
causes 10-38 
register settings 10-38 
instruction timings C-3 
branches and cr logicals C-3 
general rules C-3 
instruction cache misses C-7 
loads and stores C-6 
strings C-6 
instruction TLB. See ITLB 
instructions 


alphabetical, including extended mnemonics A-1 


arithmetic and logical 3-49, B-33 
arithmetic compares 3-13 
branch 3-51, B-38 


branch conditional, testing CTR 3-35 


byte-reverse, usefulness of 3-32 
cache 

DAC debug events 12-20 
cache control B-41 
cache control, alignment of 3-27 
compare 3-50 
comparison B-39 
condition register logical B-37 
context synchronizing, defined 3-44 
CR logical 3-50 
extended mnemonics B-9 
format diagrams A-43 
formats A-41 
forms A-41, A-43 
ICU controlling 4-9 
interrupt control 3-52, B-42 
logical compares 3-13 
opcodes A-33 
privileged B-7 
privileged, listed 3-42 


processor management 3-53, B-42 


for reading DCRs 3-43 
for reading privileged SPRs 3-42 
rotate and shift B-40 


specific to PowerPC Embedded Controllers B-1, B-5 


storage reference B-29 


storage reference, alignment of 3-27 


storage reference, incore 3-48 

TLB management: 3-53 
interrupt controller interface 1-9 
interrupt enable register 


Preliminary 


description 21-5 
interrupt identification register 
description 21-6 
Interrupts 22-21 
interrupts 
alignment 3-28 
register settings 10-40 
summary 10-39 : 
asynchronous, defined 10-22 
behavior 10-22 
critical 
defined 10-26 
processing 10-27 
critical input + 10-34 
data machine check 10-36 
data storage 6-9, 10-36 
register settings 10-37 
debug, register settings 10-44 
defined 10-22 
DTLB miss 6-10 
DTLB, register settings 10-43 
external 
programming note 10-38 
register settings 10-39 
fetching past, speculatively 3-39 
FIT, causes 10-42 
FIT, register settings 10-42 
handling as critical 10-23 
handling priorities 10-24 
handling priorities, illustrated 10-25 
imprecise, defined 10-22 
instruction storage 6-10 
causes 10-38 
register settings 10-38 
ITLB miss 6-10 
ITLB miss, registers 10-44 
machine check, causes of 10-35 
machine check, defined 10-23 
machine check—instruction 
handling 10-35 
register settings 10-36 
synchronism 10-24 
noncritical 
defined 10-26 
processing 10-26 
PIT, register settings 10-41 
precise handling 10-23 
precise, defined 10-22 
program 
causes 10-40 
ESR usage 10-40 
register settings 10-41 


register settings during critical 10-35 


synchronous, defined 10-22 

system call, register settings 10-41 

TLB miss, preventing 6-10 

TLB-related 6-9 

vector offsets, illustrated 10-27 

WDT, causes 10-43 

WOT, register settings 10-43 
isync 24-70 


Index 
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andITLB 6-8 


context synchronization, example 3-45 
ITLB (instruction translation lookaside buffer) 


accesses 6-6 

consistency 6-8 

defined 6-6 

miss interrupts 6-10, 10-44 
programming note 6-9 


L 
{bz 24-71 
Ipzu 24-72 
Ibzx 24-74 
least-recently-used policy. See LRU 
Ilha 24-75 
lhau 24-76 
Inax 24-78 
Inbrx 24-79 
Inz 24-80 
Inzu 24-81 
Ihzux 24-82 
Inzx 24-83 
li 24-9 
line contro! register 
description 21-8 
line status register 21-11 
Link Register. See LR 
lis 24-12 
little endian 
alignment 3-27 
byte ordering supported 3-30 
defined 3-28 
mapping 3-30 
Storage attributes 3-30 
storage regions 
accessing data from 3-31 


byte-reverse instructions 3-32= 3-33 


fetching instructions from 3-31 
Imw 24-84 
load strategies, controlled by DCU 4-7 
logical compares 3-13 
logical instructions 
CR 3-50 
overview 3-49 
LR 25-116 
LR (Link Register) 
branch instructions 3-51 
function 3-8 
LRU (least-recently-used) policy 
DCU 4-6 
ICU 4-2 
Iswi 24-85 
Iswx 24-87 
lwarx 24-89 
lwz 24-91 
lwzu 24-92 
lwzux 24-93 
lwzx 24-94 


M 


macchw 24-95 
macchws 24-96 
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macchwsu 24-97 
macchwu 24-98 
machhw 24-99 
machhwsu 24-101 
machhwu 24-102 
machine check interrupts 
causes 10-35 
defined 10-23 
machine check—instruction interrupts 
handling 10-35 
register settings 10-36 
synchronism 10-24 
Machine State Register. See MSR 
maclhw 24-103 
maclhws 24-104, 24-138 
maclhwu 24-106 
MALO_CFG 25-117 
MALO_ESR 25-119 
MALOLIER 25-121 
MALO_RCBSO 25-122 
MALO_RXCARR 25-123 
MALO_RXCASR 25-124 
MALO_RXCTPOR 25-125 
MALO_RXDEIR 25-126 
MALO_RXEOBISR 25-127 
MALO_TXCASR_ 25-129 
MALO_TXCTPOR 25-130 
MALO_TXCTP1R 25-130 
MALO_TXDEIR 25-131 
MALO_TXEOBISR 25-132 
mapping 
big endian 3-29 
little endian 3-30 
structure, examples 3-29 
merf 24-107 
merxr 24-108 
Memory Controller Address Register. See 
SDRAMO_CFGADDR 
Memory Controller Data Register. See 
SDRAMO_CFGDATA 
memory interface 
bus attachment 
alternative 16-3 
external bus master 16-17 
SRAM 
burst mode 16-8 
bus timeout error 16-11 
device-paced transfers 16-11 
timing 15-1, 16-2 


“memory map 


address space usage 3-2 

PCI configuration registers 25-13 
memory mapping ~ 

of hardware 3-40 
memory models, non-supported 4-7, 6-5 
memory organization 3-1 
memory-mapped input/output registers. See MMIO 
registers 
mfcr 24-109 
mfder 24-110 
mfmsr 24-111 


Preliminary 


mfspr 24-112 

mftb 24-115 

mftobu 24-115 

misalignments, defined 3-27 

MMIO (memory-mapped input/output) registers 
directly accessed 3-22 
indirectly accessed 3-25 

MMU (memory management unit) 
accesses, interrupts from 6-9 
address translation 6-1 
data storage interrupts 6-9 
DTLB miss interrupts 6-10 
execute permissions 6-13 
general access protection 6-12 
instruction storage interrupts 6-10 
ITLB miss interrupts 6-10 
MSR and access protection 6-12 
overview 1-6 
recording page references and changes 6-11 
TLB management 6-10 
zone protection 6-13 

mnemonics,extended. See extended mnemonics 

modes 
execution 3-41 
real, storage attribute control 6-17 

mr 24-140 

mr. 24-140 

MSR 3-15, 25-133 

MSR (Machine State Register) 
bits and exception handling 3-41 
contents after resets 8-3 
controlling execution mode 3-41 
DR bit 6-1 
illustrated 10-28 
interrupt control instructions 3-52 
IR bit 6-1 
programming note 10-28 
summarized 1-10 

mtcr 24-116 

micrf 24-116 

mtder 24-117 

mtmsr 
execution synchronization 3-46 

mtspr 24-119 

mulchw 24-121 

mulchwu 24-122 

mulhhw 24-123 

mulhhwu 24-124 

mulhwu 24-126 

mulhwu. 24-126 

mullhw 24-127 

mullhwu 24-128 

mulli 24-129 

mullw 24-130 

mullw. 24-130 

mullwo 24-130 

mullwo. 24-130 


N 


nand 24-131 
nand. 24-131 
neg 24-132 


Preliminary 


neg. 24-132 
nego 24-132 
nego. 24-132 
nmacchw 24-133 
nmacchws 24-134 
nmachhw 24-135 
nmachhws 24-136 
nmaclhw 24-137 
nmaclhws 24-138 
noncritical interrupts 
defined 10-26 
processing 10-26 
nop 24-142 
nor 24-139 
nor. 24-139 
not 24-139 
not. 24-139 
notation xlvili, 24-2, A-41 
notational conventions x\viii 


oO 
OCMO_DSARC 25-135 
OCMO_DSCNTL 25-136 
OCMO_ISARC 25-137 
OCMO_ISCNTL 25-138 
on-chip peripheral bus 2-11 
features 2-11 
OPB 2-11 
OPB arbiter 
registers 2-12 
OPBAO_CR 2-12, 25-139 
opcodes A-33 
optimization 
coding guidelines C-1 
alignment C-2 
boolean variables C-1 
branch prediction C-2 
dependency uponCR C-2 
floating point emulation C-1 
or 24-140 
or. 24-140 
ore 24-141 
orc. 24-141 
ori 24-142 
oris 24-143 
overlapped PLB transfers 2-4 


P 


page identification fields, UTLB 6-3 
parallel-to-serial conversion 21-1 
PCI 

configuration registers 25-13 
PCI configuration registers 

accessing 3-25 

offsets 3-25, 17-20, 25-13 
PCICO_BARO 25-141 
PCICO_BIST 25-142 
PCICO_BRDGOPT1 25-143 
PCICO_BRDGOPT2 25-144 
PCICO_CACHELS 25-145 
PCICO_CAP 25-146 
PCICO_CAPID 25-147 
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PCICO_CFGADDR 25-148 
PCICO_CFGDATA 25-149 
PCICO_CLS 25-150 
PCICO_CMD 25-151 
PCICO_DATA 25-153 
PCICO_DEVID 25-154 
PCICOLERREN 25-155 
PCICOLERRSTS 25-156 
PCICO_HDTYPE 25-157 
PCICO_ICS 25-158 
PCICO_INTLN 25-159 
PCICO_INTPN 25-160 
PCICO_LATTIM 25-161 
PCICO_MAXLTNCY 25-162 
PCICO_MINGNT 25-163 
PCICO_NEXTIPTR 25-164 
PCICO_PLBBEAR 25-165 
PCICO_PLBBESRO 25-166 
PCICO_PMC 25-170 
PCICO_PMCSR 25-171 
PCICO_PMSCRR 25-173 
PCICO_PTM1BAR 25-174 
PCICO_PTM2BAR 25-175 
PCICO_REVID 25-176 
PCICO_SBSYSID 25-177 
PCICO_SBSYSVID 25-178 
PCICO_STATUS 25-179 
PCICO_VENDID 25-181 
PCILO_PMMOLA 25-182 
PCILO_PMMOMA 25-183 
PCILO_PMMOPCIHA 25-184 
PCILO_LPMMOPCILA 25-185 
PCILO_PMMI1LA 25-186 
PCILO_PMM1MA 25-187 
PCILO_PMM1IPCIHA 25-188 
PCILO_PMM1PCILA 25-189 
PCILO_PMM2LA 25-190 
PCILO_PMM2MA 25-191 
PCILO_PMM2PCIHA 25-192 
PCILO_LPMM2PCILA 25-193 
PCILO_PTMiLA 25-194 
PCILO_PTM1MS 25-195 
PCILO_PTM2LA 25-196 
PCILO_PTM2MS 25-197 
PCIPCICO_PLBBESR1 25-168 
performance 

DCU 


improve with simultaneous caching 4-18 


limited by sequential caching 4-18 
overview 4-16 
improve 
through byte-writeability 4-6 
lower 
from cache-inhibited regions 4-4 


Peripheral Controller Address Register. See 


EBCO_CFGADDR 

Peripheral Controller Data Register. See 
EBCO_CFGDATA 

physical address map 3-2 

PID 25-198 

PID (process ID) 
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illustrated 6-12 
PIT 11-4, 25-199 
PIT (programmable interval timer) 
interrupts, register settings 10-41 
PLB 2-1 
PLB arbiter 
registers 2-5 
PLB to OPB bridge 
registers 2-8 
PLBO_ACR 2-5, 25-200 
PLBO_BEAR 2-5, 25-201 
PLBO_BESR 2-6, 25-202 
POBO_BEAR 2-8, 25-204 
POBO_BESRO 25-205 
POBO_BESR1 25-207 
portability, instruction set 24-1 
PowerPC architecture 1-4 
precise interrupts 10-22 
pre-fetch 
branches to CTR 3-38 
branches toLR 3-38 
buffers 3-33 
pastinterrupts 3-39 
primary opcodes A-33 
priority signal 
DCU 4-17 
privileged mode 
defined 3-41 
instructions, listed 3-42 
registers 3-5 
privileged programming model 3-1 
privileged SPRs 
instructions for reading 3-42 
problem state. See user mode 
process ID. See PID 
processor 
management instructions 3-53 
processor local bus 2-1 
overlapped transfers 2-4 
transfer protocol 2-3 
Processor Version Register. See PVR 
program interrupts 
causes 10-40 
ESR usage 10-40 
register settings 10-41 
programmable interval timer 11-4 
programming model 
features 3-1 
programming models 
privileged 3-1 
user 3-1 
programming note 
data storage interrupts 10-37 
EA access inDCU 4-8 
external or timer interrupts 10-38 
instruction pipeline 4-15 
MSR affected by instructions 10-28 
non-supported memory models 4-7 
reserved fields 3-3 
RPN field 6-4 
synchronizing the ITLB 6-9 


Preliminary 


pseudocode 24-2 

PVR 25-208 

PVR (Processor Version Register) 
illustrated 3-12 


R 
real mode 
storage attribute control 6-17 
register description 21-4 
register set summary 1-i0- 1-11 
registers 
categories 3-3, 25-1 
CCRO 25-15 
CPCO_CR1 25-20 
CPCO_ER 25-21 
CPCO_FR 25-22 
CPCO_JTAGID 25-23 
CPCO_PLLMR 25-24 
CPCO_PSR 25-26 
CPCO_SR 25-28 
CR 25-1, 25-29 
CTR 15-6, 15-14, 15-15, 15-16, 15-17, 15-20, 
25-30, 25-209, 25-210, 25-218, 
25-219, 25-220, 25-221 
DAC1 12-14 
DAC1-DAC2 12-14, 14-7, 25-31, 25-48 
DBCR 12-9 
DBCRO 25-32, 25-34 
DBSR 12-12, 25-36 
DCCR 25-38 
DCPO_ADDRO-DCPO_ADDR1 25-40 
DCPO_ADDRO-DCPO_ADDR3 14-5, 25-40 
DCPO_CFG 14-6, 25-41 
DCPO_CFGADDR 25-42 
DCPO_CFGDATA 25-43 
DCPO_ESR 14-8, 25-44 
DCPO_ID 14-6, 25-46 
DCPO_ITORO-DCPO_ITOR3 14-4, 25-47 
DCPO_MEMBEAR 14-7, 25-48 
DCPO_PLBBEAR 14-7, 25-49 
DCPO_RAM0-DCPO_RAMS3FF 25-50 
DCPO_VER 14-7, 25-51 
DCR numbering 25-4 
DCRs 
indirectly accessed 3-19 
summarized 1-11 
uses for 3-16 
DCWR 25-52 
DEAR 25-54 
descriptions of commonly used 3-3 
DMAO_CRO-DMAO_CR3 18-8, 25-55 
DMAO0_CTO-DMAO_CT3 18-11, 25-58 
DMA0_DAO-DMAO_DA3 18-11, 25-59 
DMAO_POL 25-60 
DMAO_SA0-DMA0_SA3_ 18-10 
DMAO_SA0-~DMAO_SA3 25-62 
DMAO_SGO0-DMA0_SG3_ 18-12 
DMA0_SG0-DMA0_SG3 25-63 
DMAO_SGC 18-13, 25-64 
DMAO_SLP 25-65 
DMAO_SR 18-7, 25-66 
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GPR 25-1 
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GPRs 

overview 3-6 

summary 1-10 
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ICCR 25-96 
ICDBDR 25-98 
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liCO_DIRECTCNTL 25-101 
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IICOLHMADR_ 25-104 
NWCO_LHSADR 25-105 
IICO_LINTRMSK 25-106 
IICO_LLMADR 25-107 
lICO_LLSADR 25-108 
IICO_LMDBUF 25-109 
IICO_MDCNTL 25-110 
liCO_SDBUF 25-111 
ICO_STS 25-112 
IICO_XFRCNT 25-113 
IICO_XTCNTLSS 25-114 
interrupt handling 10-27 
LR 25-116 
MALO_CFG 25-117 
MALO_ESR 25-119 
MALO_IER 25-121 
MALO_RCBSO 25-122 
MALO_RXCARR_ 25-123 
MALO_RXCASR_ 25-124 
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MALO_RXDEIR 25-126 
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MALO_TXCASR 25-129 
MALO_TXCTPOR 25-130 
MALO_TXCTP1R 25-130 
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MALO_TXEOBISR 25-132 
MMIO registers 

directly accessed 3-22 

indirectly accessed 3-25 
MSR 3-15, 25-1, 25-133 
OCMO_DSARC 25-135 
OCMO_DSCNTL 25-136 
OCMO_ISARC 25-137 
OCMO_ISCNTL 25-138 
OPB arbiter 2-12 
OPBAO_CR 2-12, 25-139 
PCl configuration 25-13 
PCICO_BARO 25-141 
PCICO_BIST 25-142 
PCICO_BRDGOPT1 25-143 
PCICO_BRDGOPT2 25-144 
PCICO_CACHELS 25-145 
PCICO_CAP 25-146 
PCICO_CAPID 25-147 
PCICO_CFGADDR 25-148 
PCICO_CFGDATA 25-149 
PCICO_CLS 25-150 
PCICO_CMD 25-151 
PCICO_DATA 25-153 
PCICO_DEVID 25-154 
PCICO_ERREN 25-155 
PCICO_LERRSTS 25-156 
PCICO_LHDTYPE 25-157 
PCICO_ICS 25-158 
PCICO_LINTLN 25-159 
PCICO_INTPN 25-160 
PCICO_LATTIM 25-161 
PCICO_MAXLTNCY 25-162 
PCICO_MINGNT 25-163 
PCICO_NEXTIPTR 25-164 
PCICO_PLBBEAR 25-165 
PCICO_PLBBESRO 25-166 
PCICO_PMC 25-170 
PCICO_PMCSR 25-171 
PCICO_PMSCRR 25-173 
PCICO_PTM1BAR 25-174 
PCICO_PTM2BAR 25-175 
PCICO_REVID 25-176 
PCICO_SBSYSID 25-177 
PCICO_SBSYSVID 25-178 
PCICO_STATUS 25-179 
PCICO_VENDID 25-181 
PCILOLPMMOLA 25-182 
PCILO_PMMOMA 25-183 
PCILO_PMMOPCIHA 25-184 
PCILO_LPMMOPCILA 25-185 
PCILO_LPMM1LA 25-186 
PCILO_LPMM1MA 25-187 
PCILOLPMM1PCIHA 25-188 
PCILOLPMM1PCILA 25-189 
PCILOLPMM2LA 25-190 
* PCILO_LPMM2MA 25-191 
PCILO_PMM2PCIHA 25-192 
PCILOLPMM2PCILA 25-193 
PCILO_PTM1LA 25-194 
PCILO_PTM1MS 25-195 
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PCILO_PTM2LA 25-196 
PCILO_PTM2MS 25-197 
PCIPCICO_PLBBESR1 25-168 
PID 25-198 

PIT 11-4, 25-199 

PLB arbiter 2-5 

PLB to OPB bridge 2-8 
PLBO_ACR 2-5, 25-200 
PLBO_BEAR 2-5, 25-201 
PLBO_BESR 2-6, 25-202 
POBO_BEAR 2-8, 25-204 
POBO_BESRO 25-205 
POBO_BESR1 25-207 
PVR 25-208 

reserved 25-1 

reserved fields 3-3, 25-1 


’ SDRAMO_BOCR-SDRAMO_B3CR_ 25-209 


SDRAMO_BEAR 25-210 
SDRAMO_BESRO 25-211 
SDRAMO_BESR1 25-213 
SDRAMO_CFG 25-214 
SDRAMO_CFGADDR 25-216 
SDRAMO_CFGDATA 25-217 
SDRAMO_ECCCFG 25-218 
SDRAMO_ECCESR 25-219 
SDRAMO_PMIT 25-220 
SDRAMO_RTR 25-221 
SDRAMO_TR 25-222 
SGR 25-224 
SLER 25-226 
SPR numbering 25-1 
SPRGO-SPRG4 3-11 
SPRGO-SPRG7 25-228 
SPRs 

overview 3-6 

summary 1-10 
SRRO 25-229 
SRR1 25-230 
SRR2 25-231 
SRR3 25-232 
SUOR 25-233 
summary of sets 1-10- 1-11 
supervisor, illustrated 3-5 
TBL 25-235 
TBU 25-236 
TCR 11-5, 11-6, 11-9, 25-237 
TSR 11-6, 11-8, 25-238 
UARTx_DLL 25-239 
UARTx_DLM 25-240 
UARTx_FCR 25-241 
UARTx_IER 25-242 
UARTX_IIR 925-243 
UARTx_LCR 25-244 
UARTX_LSR 25-245 
UARTx_MCR 25-247 
UARTx_MSR_ 25-248 
UARTx_RBR 25-249 
UARTx_SCR 25-250 
UARTx_THR 25-251 
UICO_CR 25-252 
UICO_LER 25-255 
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UICO_MSR 25-258 
UICO_PR 25-261 
UICO_SR 25-264 
UICO_TR 25-267 
UICO_VCR 25-270 
UICO_VR 25-271 
user, illustrated 3-5 
USPRGO 3-11, 25-272 
XER 25-273 
ZPR 25-274 
reservation bit 24-89, 24-171 
reserved fields 25-1 
programming note 3-3 
reserved registers 25-1 
resets 
effects on MSR 8-3 
effects on SPRs 8-4 
processor initialization 8-14 
processor state after 8-2 
rfci 24-144 
effect on MSR reserved fields 10-28 
fi 24-145 
effect on MSR reserved fields 10-28 
rlwimi 24-146 
rlwimi. 24-146 
rlwinm 24-147 
rlwinm. 24-147 
rlwnm 24-150 
rlwnm. 24-150 
rotlw 24-150 
rotlw. 24-150 
rotlwi 24-148 
rotlwi. 24-148 
rotrwi 24-148 
rotrwi. 24-148 
rxtended mnemonics 
bnectr 24-28 


Ss 
Save/Restore Registers 0-1. See SRRO-1 
sc 24-151 
scratchpad register 21-13 
SDRAM controller 
DCRs 
access procedures, overview 3-19 
indirect access 3-19 
offsets 3-19 
SDRAM0O_BOCR-SDRAM0_B3CR_ 25-209 
SDRAMO_BEAR 25-210 
SDRAMO_BESRO 25-211 
SDRAMO_BESR1 25-213 
SDRAMO_CFG 25-214 
SDRAMO_CFGADDR 25-216 
SDRAMO_CFGADDR (Memory Coniroller Address 
Register) 
accessing 3-19 
SDRAMO_CFGDATA 25-217 
SDRAMO_CFGDATA (Memory Controller Data Register) 
accessing 3-19 
SDRAMO_ECCCFG 25-218 
SDRAMO_ECCESR 25-219 
SDRAMO_PMIT 25-220 
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SDRAMO_RTR 25-221 

SDRAMO_TR 25-222 

secondary opcodes A-33 

serial-interface characteristic 21-2 

serial-to-parallel conversion 21-1 

SGR 25-224 

SGR (Storage Guarded Register) 
controlling speculative accesses 3-38 
controlling the guarded (G) storage attribute 6-19 

shadow TLB. See DTLB 

SLER 25-226 

SLER (Storage Little Endian Register) 
controlling the endian (E) storage attribute 6-19 

slw 24-152 

slw. 24-152 

slwi 24-148 

slwi. 24-148 

Special Purpose Register General 0-7. See SPRGO-7 

special purpose registers. See SPRs 

speculative accesses 
toCTRorLR 3-38 
defined 3-37 
down predicted path 3-38 
fetching past interrupts 3-39 
fetching past tw ortwi 3-39 
fetching past unconditional branches 3-40 
preventing inappropriate 3-37= 3-41 

SPRGO-7 (Special Purpose Register General 0-7) 
temporary storage to 3-11 

SPRGO-SPRG4 3-11 

SPRGO-SPRG7 25-228 

SPRs (special purpose registers) 
contents after resets 8-4 
listed, with page references 3-7 
overview 3-6 
privileged and non-privileged 3-6 
privileged, instructions for reading 3-42 
summary 1-10 

SRAM 
timing 15-1, 16-2 

sraw 24-153 

Ssraw. 24-153 

srawi 24-154 

srawi. 24-154 

SRRO 25-229 

SRRO-1 (Save/Restore Registers 0-1) 
illustrated 10-29 

SRR1 25-230 

SRR2 25-231 

SRR3 25-232 

srw 24-155 

srw. 24-155 

srwi 24-149 

srwi. 24-149 

stb 24-156 

stbu 24-157 

stbux 24-158 

stbx 24-159 

sth 24-160 

sthbrx 24-161 

sthu 24-162 
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sthux 24-163 stwx 24-175 


sthx 24-164 SUOR 25-233 
stmw 24-165 SUOR (Storage User-Defined 0 Register) 
storage attribute control registers controlling the user-defined (UO) storage attribute 
DCCR 6-19 6-19 
DCWR 6-18 sub 24-176 
ICCR 6-19 sub. 24-176 
SGR_ 6-19 sube 24-177 
SLER 6-19 subc. 24-177 
SUOR 6-19 subco 24-177 
storage attributes subco. 24-177 
caching inhibited (I) subf 24-176 
realmode 6-19 * subf. 24-176 
virtual mode 6-5 subfe 24-177 
endian (E) subfc. 24-177 
and little endian 3-30 subfco 24-177 
realmode 6-19 subfco. 24-177 
when controlled by TLB 6-6 subfe 24-178 
guarded (G) subfe. 24-178 
controlling speculative accesses 3-37 subfeo 24-178 
realmode 6-19 subfeo, 24-178 
virtual mode 6-6 subfic 24-179 
memory coherent (M) subfme 24-180 
not supported 6-6 subfme. 24-180 
overview 3-3 subfmeo 24-180 
realmode 6-17 subfmeo. 24-180 
TLB control of 6-5 subfo 24-176 
user-defined (U0) subfo. 24-176 
realmode 6-19 subfze 24-181 
virtual mode 6-5 subfze. 24-181 
write-through (W) subfzeo 24-181 
realmode 6-18 subfzeo. 24-181 
virtual mode 6-5 subi 24-9 
Storage Guarded Register. See SGR subic 24-10 
Storage Guarded Register. See SGR subic. 24-11 
Storage Little Endian Register. See SLER subis 24-12 
storage reference instructions 3-48 subo 24-176 
storage regions subo. 24-176 
big endian supervisor state. See privileged mode 
alignment 3-27 syne 24-182 
byte-reverse instructions 3-32= 3-33 storage synchronization 3-46 
little endian synchronization 
accessing data from 3-31 context 3-44 
alignment 3-27 execution, defined 3-46 
byte reversal 3-31 ICU 4-5 
byte-reverse instructions 3-32= 3-33 references to PowerPC Architecture 3-43 
data alignment 3-32 . storage 3-46 
fetching instructions from 3-31 synchronous interrupts 10-22 
storage synchronization 3-46 system call interrupts 
Storage User-Defined 0 Register. See SUOR register settings 10-41 
String instructions T 


access protection 6-16 
structure mapping 
examples 3-29 


TBL 25-235 
tblrehi 24-185 
tblrelo 24-185 


stswi 24-166 ; 

tblwehi 24-189 
stswx 24-167 

tblwelo 24-189 
stw 24-169 

TBU 25-236 
stwbrx 24-170 

TCR 11-9, 25-237 
stwex. 24-171 : 

TID (translation ID) 
sw ee128 and MMU access protection 
stwux 24-174 p 


time base 11-2 
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implementation 3-15 twgti 24-194 


writing 3-15 twi 24-193 
timer interrupts fetching past 3-39 
programming note 10-38 twle 24-191 
timers twlei 24-194 
FIT 11-5 twlgei 24-194 
fixed interval timer 11-5 twigt 24-191 
PIT 11-4 twigti 24-194 
programmable interval timer 11-4 twlle 24-192 
TCR 11-9 twllei 24-194 
timer control register 11-9 twllt 24-192 
timer status register 11-8 twllti 24-194 
TSR 11-8 twing 24-192 
watchdog 11-6 twingi 24-194 
timings twin] 24-192 
instruction C-3 twinli 24-195 
branches and cr logicals C-3 twit 24-192 
general rules C-3 twiti 24-195 
instruction cache misses C-7 twne 24-192 
loads andstores C-6 twnei 24-195 
strings C-6 twng 24-192 
TLB (translation lookaside buffer) 6-2 twngi 24-195 
access protection 6-12, 6-15 twnl 24-192 
and cacheability control 4-8 twnli 24-195 
execute permissions 6-13 U 


interrupts 6-9 

invalidate instruction 6-11 
management instructions 3-53 
preventing miss interrupts 6-10 
read/write instructions 6-11 
search instructions 6-11 

sync instruction 6-11 

zone protection 6-13 

See also ITLB;UTLB;DTLB 


UART Reset and Sleep mode 21-16 
UARTx_DLL 25-239 

UARTx_DLM 25-240 
UARTx_FCR 25-241 

UARTX_IER 25-242 

UARTX_IIR 25-243 

UARTx_LCR 25-244 

UARTx_LSR 25-245 
UARTX_MCR_ 25-247 


tlbia 24-183 
UARTx_MSR_ 25-248 
and TLB management 6-11 UARTx_RBR 25-249 
tIbre 24-184 UARTx_SCR 25-250 
and TLB management 6-11 ie : 
UARTx_THR 25-251 
tlbsx 24-186 UICO_CR 25-252 
and TLB management 6-11 UICO_ER 35-255 
tlbsx. 24-186 5 ‘ 


UICO_MSR 25-258 
UICO_PR 25-261 
UICO_SR 25-264 
UICO_TR 25-267 
UICO_VCR 25-270 
UICO_VR 25-271 
unconditional branches 
AA field . 3-34 
speculative accesses 3-40 
unified TLB. See UTLB 


and TLB management 6-11 
tlbsync 24-187 
and TLB management 6-11 
tlbwe 24-188 
and TLB management 6-11 
transfer protocol 
processor local bus 2-3 
translation ID. See TID 
translation lookaside buffer. See TLB 
translation, address. See address translation 


user mode 
trap 24-191 . 
TSR 11-8, 25-238 ae 
tw 24-190 ieccnaaeen 


user programming model 3-1 


ecco a ae user-defined (UO) storage attribute 
tweqi 24-194 controlled by SUOR_ 6-19 
twge 24-191 USPRGO 3-11, 25-272 
twgei 24-194 UTLB (unified translation lookaside buffer) 
twgle 24-191 access control fields 6-5 
twgt 24-191 entry format, illustrated 6-3 
EPN field 6-3 
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EX field 6-5 

field categories 6-3 
functional overview 6-2 
page identification fields 6-3 
RPN field 6-4 

SIZE field 6-4 

TID field 6-4 
translation field 6-4 

V field 6-4 

WR field 6-5 

ZSEL field 6-5 


V 


virtual mode 
and TLB control of storage attributes 6-5 


WwW 
watchdog timer 11-6 
WDT (watchdog timer) 
interrupts, causes 10-43 
interrupts, register settings 10-43 
write strategies 
controlled by DCWR 4-7 
used byDCU 4-7 
write-through (W) storage attribute 
controlled by DCWR_ 6-18 , 
when controlled by TLB_ 6-5 
wrtee 24-196 
wrteei 24-197 


X 

XER 25-273 

XER (Fixed Point Exception Register) 
illustrated 3-8 

xor 24-198 

xori 24-199 


z 

zone fault 10-37 

Zone Protection Register. See ZPR 

zone, defined 6-13 

ZPR 25-274 

ZPR (Zone Protection Register) 
illustrated 6-13 
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